UnknownSec Bypass
403
:
/
usr
/
local
/
maldetect.last
/
logs
/ [
drwxr-xr-x
]
Menu
Upload
Mass depes
Mass delete
Terminal
Info server
About
name :
event_log
Jul 07 03:21:04 root maldet(20035): {sigup} performing signature update check... Jul 07 03:21:04 root maldet(20035): {sigup} local signature set is version 201907043616 Jul 07 03:21:05 root maldet(20035): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 07 03:21:05 root maldet(20035): {sigup} latest signature set already installed Jul 07 03:21:05 root maldet(19634): {update} completed update v1.6.4 e6fec5 => v1.6.4 8d5e2b, running signature updates... Jul 07 03:21:05 root maldet(20150): {sigup} performing signature update check... Jul 07 03:21:05 root maldet(20150): {sigup} local signature set is version 201907043616 Jul 07 03:21:06 root maldet(20150): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 07 03:21:06 root maldet(20150): {sigup} latest signature set already installed Jul 07 03:21:06 root maldet(19634): {update} update and config import completed Jul 07 03:21:06 root maldet(20270): {sigup} performing signature update check... Jul 07 03:21:06 root maldet(20270): {sigup} local signature set is version 201907043616 Jul 07 03:21:06 root maldet(20270): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 07 03:21:07 root maldet(20270): {sigup} latest signature set already installed Jul 07 03:21:07 root maldet(20385): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 07 03:21:49 root maldet(20385): {scan} signatures loaded: 15541 (12729 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 07 03:21:49 root maldet(20385): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 07 03:21:49 root maldet(20385): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 07 03:21:49 root maldet(20385): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 07 03:27:38 root maldet(20385): {scan} file list completed in 349s, found 162 files... Jul 07 03:27:38 root maldet(20385): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 07 03:27:38 root maldet(20385): {scan} scan of (162 files) in progress... Jul 07 03:28:14 root maldet(20385): {hit} malware hit {YARA}eval_post found for /home/srgtechn/public_html/wp-xml1pc.php Jul 07 03:28:14 root maldet(20385): {quar} malware quarantined from '/home/srgtechn/public_html/wp-xml1pc.php' to '/usr/local/maldetect/quarantine/wp-xml1pc.php.228020011' Jul 07 03:28:14 root maldet(20385): {scan} scan completed on : files 162, malware hits 1, cleaned hits 0, time 427s Jul 07 03:28:14 root maldet(20385): {scan} scan report saved, to view run: maldet --report 190707-0321.20385 Jul 08 03:33:21 root maldet(5329): {update} checking for available updates... Jul 08 03:33:22 root maldet(5329): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 08 03:33:22 root maldet(5329): {update} hashing install files and checking against server... Jul 08 03:33:22 root maldet(5329): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 08 03:33:22 root maldet(5329): {update} latest version already installed. Jul 08 03:33:22 root maldet(5470): {sigup} performing signature update check... Jul 08 03:33:22 root maldet(5470): {sigup} local signature set is version 201907043616 Jul 08 03:33:23 root maldet(5470): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 08 03:33:23 root maldet(5470): {sigup} new signature set 201907071618 available Jul 08 03:33:23 root maldet(5470): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 08 03:33:24 root maldet(5470): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 08 03:33:24 root maldet(5470): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 08 03:33:24 root maldet(5470): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 08 03:33:25 root maldet(5470): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 08 03:33:25 root maldet(5470): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 08 03:33:25 root maldet(5470): {sigup} verified md5sum of maldet-sigpack.tgz Jul 08 03:33:25 root maldet(5470): {sigup} unpacked and installed maldet-sigpack.tgz Jul 08 03:33:26 root maldet(5470): {sigup} verified md5sum of maldet-clean.tgz Jul 08 03:33:26 root maldet(5470): {sigup} unpacked and installed maldet-clean.tgz Jul 08 03:33:26 root maldet(5470): {sigup} signature set update completed Jul 08 03:33:26 root maldet(5470): {sigup} 15541 signatures (12729 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 08 03:33:26 root maldet(5728): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 08 03:33:48 root maldet(5728): {scan} signatures loaded: 15541 (12729 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 08 03:33:48 root maldet(5728): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 08 03:33:48 root maldet(5728): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 08 03:33:48 root maldet(5728): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 08 03:33:50 root maldet(5728): {scan} file list completed in 2s, found 182 files... Jul 08 03:33:50 root maldet(5728): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 08 03:33:50 root maldet(5728): {scan} scan of (182 files) in progress... Jul 08 03:34:06 root maldet(5728): {hit} malware hit {YARA}eval_post found for /home/srgtechn/public_html/wp-xml1pc.php Jul 08 03:34:06 root maldet(5728): {quar} malware quarantined from '/home/srgtechn/public_html/wp-xml1pc.php' to '/usr/local/maldetect/quarantine/wp-xml1pc.php.2970219304' Jul 08 03:34:06 root maldet(5728): {scan} scan completed on : files 182, malware hits 1, cleaned hits 0, time 40s Jul 08 03:34:06 root maldet(5728): {scan} scan report saved, to view run: maldet --report 190708-0333.5728 Jul 09 03:43:19 root maldet(25166): {update} checking for available updates... Jul 09 03:43:20 root maldet(25166): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 09 03:43:20 root maldet(25166): {update} hashing install files and checking against server... Jul 09 03:43:20 root maldet(25166): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 09 03:43:20 root maldet(25166): {update} latest version already installed. Jul 09 03:43:20 root maldet(25316): {sigup} performing signature update check... Jul 09 03:43:20 root maldet(25316): {sigup} local signature set is version 201907071618 Jul 09 03:43:21 root maldet(25316): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 09 03:43:21 root maldet(25316): {sigup} latest signature set already installed Jul 09 03:43:21 root maldet(25430): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 09 03:43:21 root maldet(25430): {scan} signatures loaded: 15541 (12729 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 09 03:43:21 root maldet(25430): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 09 03:43:21 root maldet(25430): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 09 03:43:21 root maldet(25430): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 09 03:43:24 root maldet(25430): {scan} file list completed in 3s, found 156 files... Jul 09 03:43:24 root maldet(25430): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 09 03:43:24 root maldet(25430): {scan} scan of (156 files) in progress... Jul 09 03:43:33 root maldet(25430): {hit} malware hit {YARA}eval_post found for /home/srgtechn/public_html/wp-xml1pc.php Jul 09 03:43:33 root maldet(25430): {quar} malware quarantined from '/home/srgtechn/public_html/wp-xml1pc.php' to '/usr/local/maldetect/quarantine/wp-xml1pc.php.326968523' Jul 09 03:43:33 root maldet(25430): {scan} scan completed on : files 156, malware hits 1, cleaned hits 0, time 12s Jul 09 03:43:33 root maldet(25430): {scan} scan report saved, to view run: maldet --report 190709-0343.25430 Jul 10 03:24:13 root maldet(5319): {update} checking for available updates... Jul 10 03:24:13 root maldet(5319): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 10 03:24:13 root maldet(5319): {update} hashing install files and checking against server... Jul 10 03:24:14 root maldet(5319): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 10 03:24:14 root maldet(5319): {update} latest version already installed. Jul 10 03:24:14 root maldet(5458): {sigup} performing signature update check... Jul 10 03:24:14 root maldet(5458): {sigup} local signature set is version 201907071618 Jul 10 03:24:15 root maldet(5458): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 10 03:24:15 root maldet(5458): {sigup} latest signature set already installed Jul 10 03:24:15 root maldet(5570): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 10 03:24:15 root maldet(5570): {scan} signatures loaded: 15541 (12729 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 10 03:24:15 root maldet(5570): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 10 03:24:15 root maldet(5570): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 10 03:24:15 root maldet(5570): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 10 03:24:17 root maldet(5570): {scan} file list completed in 2s, found 2452 files... Jul 10 03:24:17 root maldet(5570): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 10 03:24:17 root maldet(5570): {scan} scan of (2452 files) in progress... Jul 10 03:24:54 root maldet(5570): {hit} malware hit {YARA}eval_post found for /home/srgtechn/public_html/wp-xml1pc.php Jul 10 03:24:54 root maldet(5570): {quar} malware quarantined from '/home/srgtechn/public_html/wp-xml1pc.php' to '/usr/local/maldetect/quarantine/wp-xml1pc.php.2373428739' Jul 10 03:24:54 root maldet(5570): {hit} malware hit {HEX}php.include.remote.482 found for /home/srgtechn/public_html/Admin@SrgTech/img/.index.jpeg Jul 10 03:24:54 root maldet(5570): {quar} malware quarantined from '/home/srgtechn/public_html/Admin@SrgTech/img/.index.jpeg' to '/usr/local/maldetect/quarantine/.index.jpeg.2967318066' Jul 10 03:24:54 root maldet(5570): {scan} scan completed on : files 2452, malware hits 2, cleaned hits 0, time 39s Jul 10 03:24:54 root maldet(5570): {scan} scan report saved, to view run: maldet --report 190710-0324.5570 Jul 11 03:21:14 root maldet(2324): {update} checking for available updates... Jul 11 03:21:15 root maldet(2324): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 11 03:21:15 root maldet(2324): {update} hashing install files and checking against server... Jul 11 03:21:16 root maldet(2324): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 11 03:21:16 root maldet(2324): {update} latest version already installed. Jul 11 03:21:16 root maldet(2462): {sigup} performing signature update check... Jul 11 03:21:16 root maldet(2462): {sigup} local signature set is version 201907071618 Jul 11 03:21:16 root maldet(2462): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 11 03:21:16 root maldet(2462): {sigup} new signature set 2019071030246 available Jul 11 03:21:16 root maldet(2462): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 11 03:21:17 root maldet(2462): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 11 03:21:18 root maldet(2462): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 11 03:21:18 root maldet(2462): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 11 03:21:18 root maldet(2462): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 11 03:21:19 root maldet(2462): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 11 03:21:19 root maldet(2462): {sigup} verified md5sum of maldet-sigpack.tgz Jul 11 03:21:19 root maldet(2462): {sigup} unpacked and installed maldet-sigpack.tgz Jul 11 03:21:19 root maldet(2462): {sigup} verified md5sum of maldet-clean.tgz Jul 11 03:21:19 root maldet(2462): {sigup} unpacked and installed maldet-clean.tgz Jul 11 03:21:19 root maldet(2462): {sigup} signature set update completed Jul 11 03:21:19 root maldet(2462): {sigup} 15542 signatures (12730 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 11 03:21:19 root maldet(2719): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 11 03:21:42 root maldet(2719): {scan} signatures loaded: 15542 (12730 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 11 03:21:42 root maldet(2719): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 11 03:21:42 root maldet(2719): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 11 03:21:42 root maldet(2719): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 11 03:21:44 root maldet(2719): {scan} file list completed in 2s, found 137 files... Jul 11 03:21:44 root maldet(2719): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 11 03:21:44 root maldet(2719): {scan} scan of (137 files) in progress... Jul 11 03:22:00 root maldet(2719): {scan} scan completed on : files 137, malware hits 0, cleaned hits 0, time 41s Jul 11 03:22:00 root maldet(2719): {scan} scan report saved, to view run: maldet --report 190711-0321.2719 Jul 12 03:52:26 root maldet(20904): {update} checking for available updates... Jul 12 03:52:26 root maldet(20904): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 12 03:52:26 root maldet(20904): {update} hashing install files and checking against server... Jul 12 03:52:27 root maldet(20904): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 12 03:52:27 root maldet(20904): {update} latest version already installed. Jul 12 03:52:27 root maldet(21053): {sigup} performing signature update check... Jul 12 03:52:27 root maldet(21053): {sigup} local signature set is version 2019071030246 Jul 12 03:52:28 root maldet(21053): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 12 03:52:28 root maldet(21053): {sigup} latest signature set already installed Jul 12 03:52:28 root maldet(21173): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 12 03:52:28 root maldet(21173): {scan} signatures loaded: 15542 (12730 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 12 03:52:28 root maldet(21173): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 12 03:52:28 root maldet(21173): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 12 03:52:28 root maldet(21173): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 12 03:52:30 root maldet(21173): {scan} file list completed in 2s, found 555 files... Jul 12 03:52:30 root maldet(21173): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 12 03:52:30 root maldet(21173): {scan} scan of (555 files) in progress... Jul 12 03:52:38 root maldet(21173): {scan} scan completed on : files 555, malware hits 0, cleaned hits 0, time 10s Jul 12 03:52:38 root maldet(21173): {scan} scan report saved, to view run: maldet --report 190712-0352.21173 Jul 13 03:50:19 root maldet(2835): {update} checking for available updates... Jul 13 03:50:20 root maldet(2835): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 13 03:50:20 root maldet(2835): {update} hashing install files and checking against server... Jul 13 03:50:20 root maldet(2835): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 13 03:50:20 root maldet(2835): {update} latest version already installed. Jul 13 03:50:21 root maldet(2974): {sigup} performing signature update check... Jul 13 03:50:21 root maldet(2974): {sigup} local signature set is version 2019071030246 Jul 13 03:50:22 root maldet(2974): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 13 03:50:22 root maldet(2974): {sigup} latest signature set already installed Jul 13 03:50:22 root maldet(3087): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 13 03:50:22 root maldet(3087): {scan} signatures loaded: 15542 (12730 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 13 03:50:22 root maldet(3087): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 13 03:50:22 root maldet(3087): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 13 03:50:22 root maldet(3087): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 13 03:50:25 root maldet(3087): {scan} file list completed in 2s, found 150 files... Jul 13 03:50:25 root maldet(3087): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 13 03:50:25 root maldet(3087): {scan} scan of (150 files) in progress... Jul 13 03:50:32 root maldet(3087): {scan} scan completed on : files 150, malware hits 0, cleaned hits 0, time 10s Jul 13 03:50:32 root maldet(3087): {scan} scan report saved, to view run: maldet --report 190713-0350.3087 Jul 14 03:32:56 root maldet(4480): {update} checking for available updates... Jul 14 03:32:57 root maldet(4480): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 14 03:32:57 root maldet(4480): {update} hashing install files and checking against server... Jul 14 03:32:58 root maldet(4480): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 14 03:32:58 root maldet(4480): {update} latest version already installed. Jul 14 03:32:58 root maldet(4626): {sigup} performing signature update check... Jul 14 03:32:58 root maldet(4626): {sigup} local signature set is version 2019071030246 Jul 14 03:32:59 root maldet(4626): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 14 03:32:59 root maldet(4626): {sigup} new signature set 2019071326167 available Jul 14 03:32:59 root maldet(4626): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 14 03:33:00 root maldet(4626): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 14 03:33:01 root maldet(4626): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 14 03:33:01 root maldet(4626): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 14 03:33:01 root maldet(4626): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 14 03:33:02 root maldet(4626): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 14 03:33:02 root maldet(4626): {sigup} verified md5sum of maldet-sigpack.tgz Jul 14 03:33:03 root maldet(4626): {sigup} unpacked and installed maldet-sigpack.tgz Jul 14 03:33:03 root maldet(4626): {sigup} verified md5sum of maldet-clean.tgz Jul 14 03:33:03 root maldet(4626): {sigup} unpacked and installed maldet-clean.tgz Jul 14 03:33:03 root maldet(4626): {sigup} signature set update completed Jul 14 03:33:03 root maldet(4626): {sigup} 15542 signatures (12730 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 14 03:33:03 root maldet(4884): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 14 03:33:44 root maldet(4884): {scan} signatures loaded: 15542 (12730 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 14 03:33:44 root maldet(4884): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 14 03:33:44 root maldet(4884): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 14 03:33:44 root maldet(4884): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 14 03:40:38 root maldet(4884): {scan} file list completed in 414s, found 140 files... Jul 14 03:40:38 root maldet(4884): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 14 03:40:38 root maldet(4884): {scan} scan of (140 files) in progress... Jul 14 03:41:10 root maldet(4884): {scan} scan completed on : files 140, malware hits 0, cleaned hits 0, time 487s Jul 14 03:41:10 root maldet(4884): {scan} scan report saved, to view run: maldet --report 190714-0333.4884 Jul 15 03:22:07 root maldet(25475): {update} checking for available updates... Jul 15 03:22:10 root maldet(25475): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 15 03:22:10 root maldet(25475): {update} hashing install files and checking against server... Jul 15 03:22:10 root maldet(25475): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 15 03:22:10 root maldet(25475): {update} latest version already installed. Jul 15 03:22:10 root maldet(25615): {sigup} performing signature update check... Jul 15 03:22:10 root maldet(25615): {sigup} local signature set is version 2019071326167 Jul 15 03:22:11 root maldet(25615): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 15 03:22:11 root maldet(25615): {sigup} latest signature set already installed Jul 15 03:22:11 root maldet(25728): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 15 03:22:14 root maldet(25728): {scan} signatures loaded: 15542 (12730 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 15 03:22:14 root maldet(25728): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 15 03:22:14 root maldet(25728): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 15 03:22:14 root maldet(25728): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 15 03:28:29 root maldet(25728): {scan} file list completed in 375s, found 103 files... Jul 15 03:28:29 root maldet(25728): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 15 03:28:29 root maldet(25728): {scan} scan of (103 files) in progress... Jul 15 03:28:52 root maldet(25728): {scan} scan completed on : files 103, malware hits 0, cleaned hits 0, time 401s Jul 15 03:28:52 root maldet(25728): {scan} scan report saved, to view run: maldet --report 190715-0322.25728 Jul 16 03:38:01 root maldet(1473): {update} checking for available updates... Jul 16 03:38:01 root maldet(1473): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 16 03:38:01 root maldet(1473): {update} hashing install files and checking against server... Jul 16 03:38:02 root maldet(1473): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 16 03:38:02 root maldet(1473): {update} latest version already installed. Jul 16 03:38:02 root maldet(1611): {sigup} performing signature update check... Jul 16 03:38:02 root maldet(1611): {sigup} local signature set is version 2019071326167 Jul 16 03:38:03 root maldet(1611): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 16 03:38:03 root maldet(1611): {sigup} latest signature set already installed Jul 16 03:38:03 root maldet(1724): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 16 03:38:04 root maldet(1724): {scan} signatures loaded: 15542 (12730 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 16 03:38:04 root maldet(1724): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 16 03:38:04 root maldet(1724): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 16 03:38:04 root maldet(1724): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 16 03:38:06 root maldet(1724): {scan} file list completed in 2s, found 144 files... Jul 16 03:38:06 root maldet(1724): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 16 03:38:06 root maldet(1724): {scan} scan of (144 files) in progress... Jul 16 03:38:14 root maldet(1724): {scan} scan completed on : files 144, malware hits 0, cleaned hits 0, time 10s Jul 16 03:38:14 root maldet(1724): {scan} scan report saved, to view run: maldet --report 190716-0338.1724 Jul 17 03:28:15 root maldet(27491): {update} checking for available updates... Jul 17 03:28:16 root maldet(27491): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 17 03:28:16 root maldet(27491): {update} hashing install files and checking against server... Jul 17 03:28:16 root maldet(27491): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 17 03:28:16 root maldet(27491): {update} latest version already installed. Jul 17 03:28:16 root maldet(27626): {sigup} performing signature update check... Jul 17 03:28:16 root maldet(27626): {sigup} local signature set is version 2019071326167 Jul 17 03:28:17 root maldet(27626): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 17 03:28:17 root maldet(27626): {sigup} new signature set 2019071622063 available Jul 17 03:28:17 root maldet(27626): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 17 03:28:18 root maldet(27626): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 17 03:28:18 root maldet(27626): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 17 03:28:18 root maldet(27626): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 17 03:28:19 root maldet(27626): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 17 03:28:19 root maldet(27626): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 17 03:28:19 root maldet(27626): {sigup} verified md5sum of maldet-sigpack.tgz Jul 17 03:28:19 root maldet(27626): {sigup} unpacked and installed maldet-sigpack.tgz Jul 17 03:28:20 root maldet(27626): {sigup} verified md5sum of maldet-clean.tgz Jul 17 03:28:20 root maldet(27626): {sigup} unpacked and installed maldet-clean.tgz Jul 17 03:28:20 root maldet(27626): {sigup} signature set update completed Jul 17 03:28:20 root maldet(27626): {sigup} 15542 signatures (12730 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 17 03:28:20 root maldet(27867): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 17 03:28:43 root maldet(27867): {scan} signatures loaded: 15542 (12730 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 17 03:28:43 root maldet(27867): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 17 03:28:43 root maldet(27867): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 17 03:28:43 root maldet(27867): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 17 03:28:45 root maldet(27867): {scan} file list completed in 2s, found 134 files... Jul 17 03:28:45 root maldet(27867): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 17 03:28:45 root maldet(27867): {scan} scan of (134 files) in progress... Jul 17 03:29:01 root maldet(27867): {scan} scan completed on : files 134, malware hits 0, cleaned hits 0, time 41s Jul 17 03:29:01 root maldet(27867): {scan} scan report saved, to view run: maldet --report 190717-0328.27867 Jul 18 03:53:38 root maldet(26703): {update} checking for available updates... Jul 18 03:53:38 root maldet(26703): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 18 03:53:38 root maldet(26703): {update} hashing install files and checking against server... Jul 18 03:53:38 root maldet(26703): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 18 03:53:38 root maldet(26703): {update} latest version already installed. Jul 18 03:53:39 root maldet(26839): {sigup} performing signature update check... Jul 18 03:53:39 root maldet(26839): {sigup} local signature set is version 2019071622063 Jul 18 03:53:39 root maldet(26839): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 18 03:53:39 root maldet(26839): {sigup} latest signature set already installed Jul 18 03:53:39 root maldet(26950): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 18 03:53:39 root maldet(26950): {scan} signatures loaded: 15542 (12730 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 18 03:53:39 root maldet(26950): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 18 03:53:39 root maldet(26950): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 18 03:53:39 root maldet(26950): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 18 03:53:42 root maldet(26950): {scan} file list completed in 3s, found 1843 files... Jul 18 03:53:42 root maldet(26950): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 18 03:53:42 root maldet(26950): {scan} scan of (1843 files) in progress... Jul 18 03:53:54 root maldet(26950): {scan} scan completed on : files 1843, malware hits 0, cleaned hits 0, time 15s Jul 18 03:53:54 root maldet(26950): {scan} scan report saved, to view run: maldet --report 190718-0353.26950 Jul 19 03:37:05 root maldet(7518): {update} checking for available updates... Jul 19 03:37:06 root maldet(7518): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 19 03:37:06 root maldet(7518): {update} hashing install files and checking against server... Jul 19 03:37:07 root maldet(7518): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 19 03:37:07 root maldet(7518): {update} latest version already installed. Jul 19 03:37:07 root maldet(7651): {sigup} performing signature update check... Jul 19 03:37:07 root maldet(7651): {sigup} local signature set is version 2019071622063 Jul 19 03:37:08 root maldet(7651): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 19 03:37:08 root maldet(7651): {sigup} latest signature set already installed Jul 19 03:37:08 root maldet(7764): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 19 03:37:08 root maldet(7764): {scan} signatures loaded: 15542 (12730 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 19 03:37:08 root maldet(7764): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 19 03:37:08 root maldet(7764): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 19 03:37:08 root maldet(7764): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 19 03:37:10 root maldet(7764): {scan} file list completed in 2s, found 141 files... Jul 19 03:37:10 root maldet(7764): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 19 03:37:10 root maldet(7764): {scan} scan of (141 files) in progress... Jul 19 03:37:31 root maldet(7764): {scan} scan completed on : files 141, malware hits 0, cleaned hits 0, time 23s Jul 19 03:37:31 root maldet(7764): {scan} scan report saved, to view run: maldet --report 190719-0337.7764 Jul 20 03:37:30 root maldet(1079): {update} checking for available updates... Jul 20 03:37:31 root maldet(1079): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 20 03:37:31 root maldet(1079): {update} hashing install files and checking against server... Jul 20 03:37:31 root maldet(1079): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 20 03:37:31 root maldet(1079): {update} latest version already installed. Jul 20 03:37:31 root maldet(1214): {sigup} performing signature update check... Jul 20 03:37:31 root maldet(1214): {sigup} local signature set is version 2019071622063 Jul 20 03:37:32 root maldet(1214): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 20 03:37:32 root maldet(1214): {sigup} new signature set 201907193894 available Jul 20 03:37:32 root maldet(1214): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 20 03:37:33 root maldet(1214): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 20 03:37:33 root maldet(1214): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 20 03:37:33 root maldet(1214): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 20 03:37:34 root maldet(1214): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 20 03:37:34 root maldet(1214): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 20 03:37:34 root maldet(1214): {sigup} verified md5sum of maldet-sigpack.tgz Jul 20 03:37:34 root maldet(1214): {sigup} unpacked and installed maldet-sigpack.tgz Jul 20 03:37:34 root maldet(1214): {sigup} verified md5sum of maldet-clean.tgz Jul 20 03:37:34 root maldet(1214): {sigup} unpacked and installed maldet-clean.tgz Jul 20 03:37:34 root maldet(1214): {sigup} signature set update completed Jul 20 03:37:34 root maldet(1214): {sigup} 15549 signatures (12737 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 20 03:37:34 root maldet(1473): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 20 03:38:00 root maldet(1473): {scan} signatures loaded: 15549 (12737 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 20 03:38:00 root maldet(1473): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 20 03:38:00 root maldet(1473): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 20 03:38:00 root maldet(1473): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 20 03:38:02 root maldet(1473): {scan} file list completed in 2s, found 154 files... Jul 20 03:38:02 root maldet(1473): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 20 03:38:02 root maldet(1473): {scan} scan of (154 files) in progress... Jul 20 03:38:18 root maldet(1473): {hit} malware hit {YARA}eval_post found for /home/srgtechn/public_html/wp-xml1pc.php Jul 20 03:38:18 root maldet(1473): {quar} malware quarantined from '/home/srgtechn/public_html/wp-xml1pc.php' to '/usr/local/maldetect/quarantine/wp-xml1pc.php.1796925618' Jul 20 03:38:18 root maldet(1473): {scan} scan completed on : files 154, malware hits 1, cleaned hits 0, time 44s Jul 20 03:38:18 root maldet(1473): {scan} scan report saved, to view run: maldet --report 190720-0337.1473 Jul 21 03:41:47 root maldet(3894): {update} checking for available updates... Jul 21 03:41:53 root maldet(3894): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 21 03:41:53 root maldet(3894): {update} hashing install files and checking against server... Jul 21 03:41:53 root maldet(3894): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 21 03:41:53 root maldet(3894): {update} latest version already installed. Jul 21 03:41:54 root maldet(5167): {sigup} performing signature update check... Jul 21 03:41:54 root maldet(5167): {sigup} local signature set is version 201907193894 Jul 21 03:41:54 root maldet(5167): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 21 03:41:55 root maldet(5167): {sigup} latest signature set already installed Jul 21 03:41:55 root maldet(5332): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 21 03:42:01 root maldet(5332): {scan} signatures loaded: 15549 (12737 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 21 03:42:01 root maldet(5332): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 21 03:42:01 root maldet(5332): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 21 03:42:01 root maldet(5332): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 21 03:51:40 root maldet(5332): {scan} file list completed in 579s, found 139 files... Jul 21 03:51:40 root maldet(5332): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 21 03:51:40 root maldet(5332): {scan} scan of (139 files) in progress... Jul 21 03:52:07 root maldet(5332): {hit} malware hit {YARA}eval_post found for /home/srgtechn/public_html/wp-xml1pc.php Jul 21 03:52:07 root maldet(5332): {quar} malware quarantined from '/home/srgtechn/public_html/wp-xml1pc.php' to '/usr/local/maldetect/quarantine/wp-xml1pc.php.2423916285' Jul 21 03:52:07 root maldet(5332): {hit} malware hit {HEX}php.generic.malware.442 found for /home/srgtechn/public_html/index.php Jul 21 03:52:07 root maldet(5332): {quar} malware quarantined from '/home/srgtechn/public_html/index.php' to '/usr/local/maldetect/quarantine/index.php.266035348' Jul 21 03:52:07 root maldet(5332): {scan} scan completed on : files 139, malware hits 2, cleaned hits 0, time 612s Jul 21 03:52:07 root maldet(5332): {scan} scan report saved, to view run: maldet --report 190721-0341.5332 Jul 22 03:32:09 root maldet(19951): {update} checking for available updates... Jul 22 03:32:09 root maldet(19951): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 22 03:32:09 root maldet(19951): {update} hashing install files and checking against server... Jul 22 03:32:10 root maldet(19951): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 22 03:32:10 root maldet(19951): {update} latest version already installed. Jul 22 03:32:10 root maldet(20093): {sigup} performing signature update check... Jul 22 03:32:10 root maldet(20093): {sigup} local signature set is version 201907193894 Jul 22 03:32:11 root maldet(20093): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 22 03:32:11 root maldet(20093): {sigup} latest signature set already installed Jul 22 03:32:11 root maldet(20209): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 22 03:32:11 root maldet(20209): {scan} signatures loaded: 15549 (12737 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 22 03:32:11 root maldet(20209): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 22 03:32:11 root maldet(20209): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 22 03:32:11 root maldet(20209): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 22 03:32:14 root maldet(20209): {scan} file list completed in 3s, found 126 files... Jul 22 03:32:14 root maldet(20209): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 22 03:32:14 root maldet(20209): {scan} scan of (126 files) in progress... Jul 22 03:32:21 root maldet(20209): {hit} malware hit {YARA}eval_post found for /home/srgtechn/public_html/wp-xml1pc.php Jul 22 03:32:21 root maldet(20209): {quar} malware quarantined from '/home/srgtechn/public_html/wp-xml1pc.php' to '/usr/local/maldetect/quarantine/wp-xml1pc.php.1491514023' Jul 22 03:32:21 root maldet(20209): {scan} scan completed on : files 126, malware hits 1, cleaned hits 0, time 10s Jul 22 03:32:21 root maldet(20209): {scan} scan report saved, to view run: maldet --report 190722-0332.20209 Jul 23 03:43:18 root maldet(30407): {update} checking for available updates... Jul 23 03:43:19 root maldet(30407): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 23 03:43:19 root maldet(30407): {update} hashing install files and checking against server... Jul 23 03:43:20 root maldet(30407): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 23 03:43:20 root maldet(30407): {update} latest version already installed. Jul 23 03:43:20 root maldet(30541): {sigup} performing signature update check... Jul 23 03:43:20 root maldet(30541): {sigup} local signature set is version 201907193894 Jul 23 03:43:21 root maldet(30541): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 23 03:43:21 root maldet(30541): {sigup} new signature set 2019072229937 available Jul 23 03:43:21 root maldet(30541): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 23 03:43:21 root maldet(30541): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 23 03:43:22 root maldet(30541): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 23 03:43:22 root maldet(30541): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 23 03:43:22 root maldet(30541): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 23 03:43:23 root maldet(30541): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 23 03:43:23 root maldet(30541): {sigup} verified md5sum of maldet-sigpack.tgz Jul 23 03:43:23 root maldet(30541): {sigup} unpacked and installed maldet-sigpack.tgz Jul 23 03:43:23 root maldet(30541): {sigup} verified md5sum of maldet-clean.tgz Jul 23 03:43:23 root maldet(30541): {sigup} unpacked and installed maldet-clean.tgz Jul 23 03:43:23 root maldet(30541): {sigup} signature set update completed Jul 23 03:43:23 root maldet(30541): {sigup} 15549 signatures (12737 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 23 03:43:23 root maldet(30789): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 23 03:43:49 root maldet(30789): {scan} signatures loaded: 15549 (12737 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 23 03:43:49 root maldet(30789): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 23 03:43:49 root maldet(30789): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 23 03:43:49 root maldet(30789): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 23 03:43:52 root maldet(30789): {scan} file list completed in 3s, found 2323 files... Jul 23 03:43:52 root maldet(30789): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 23 03:43:52 root maldet(30789): {scan} scan of (2323 files) in progress... Jul 23 03:44:37 root maldet(30789): {hit} malware hit {YARA}eval_post found for /home/srgtechn/public_html/wp-xml1pc.php Jul 23 03:44:37 root maldet(30789): {quar} malware quarantined from '/home/srgtechn/public_html/wp-xml1pc.php' to '/usr/local/maldetect/quarantine/wp-xml1pc.php.1636422292' Jul 23 03:44:37 root maldet(30789): {scan} scan completed on : files 2323, malware hits 1, cleaned hits 0, time 74s Jul 23 03:44:37 root maldet(30789): {scan} scan report saved, to view run: maldet --report 190723-0343.30789 Jul 24 03:52:21 root maldet(32109): {update} checking for available updates... Jul 24 03:52:21 root maldet(32109): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 24 03:52:21 root maldet(32109): {update} hashing install files and checking against server... Jul 24 03:52:22 root maldet(32109): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 24 03:52:22 root maldet(32109): {update} latest version already installed. Jul 24 03:52:22 root maldet(32249): {sigup} performing signature update check... Jul 24 03:52:22 root maldet(32249): {sigup} local signature set is version 2019072229937 Jul 24 03:52:23 root maldet(32249): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 24 03:52:23 root maldet(32249): {sigup} latest signature set already installed Jul 24 03:52:23 root maldet(32360): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 24 03:52:23 root maldet(32360): {scan} signatures loaded: 15549 (12737 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 24 03:52:23 root maldet(32360): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 24 03:52:23 root maldet(32360): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 24 03:52:23 root maldet(32360): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 24 03:52:25 root maldet(32360): {scan} file list completed in 2s, found 144 files... Jul 24 03:52:25 root maldet(32360): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 24 03:52:25 root maldet(32360): {scan} scan of (144 files) in progress... Jul 24 03:52:35 root maldet(32360): {hit} malware hit {YARA}eval_post found for /home/srgtechn/public_html/wp-xml1pc.php Jul 24 03:52:35 root maldet(32360): {quar} malware quarantined from '/home/srgtechn/public_html/wp-xml1pc.php' to '/usr/local/maldetect/quarantine/wp-xml1pc.php.323826097' Jul 24 03:52:35 root maldet(32360): {scan} scan completed on : files 144, malware hits 1, cleaned hits 0, time 12s Jul 24 03:52:35 root maldet(32360): {scan} scan report saved, to view run: maldet --report 190724-0352.32360 Jul 25 03:24:59 root maldet(23723): {update} checking for available updates... Jul 25 03:25:00 root maldet(23723): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 25 03:25:00 root maldet(23723): {update} hashing install files and checking against server... Jul 25 03:25:00 root maldet(23723): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 25 03:25:00 root maldet(23723): {update} latest version already installed. Jul 25 03:25:01 root maldet(23865): {sigup} performing signature update check... Jul 25 03:25:01 root maldet(23865): {sigup} local signature set is version 2019072229937 Jul 25 03:25:01 root maldet(23865): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 25 03:25:01 root maldet(23865): {sigup} latest signature set already installed Jul 25 03:25:01 root maldet(24260): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 25 03:25:02 root maldet(24260): {scan} signatures loaded: 15549 (12737 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 25 03:25:02 root maldet(24260): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 25 03:25:02 root maldet(24260): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 25 03:25:02 root maldet(24260): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 25 03:25:04 root maldet(24260): {scan} file list completed in 2s, found 1917 files... Jul 25 03:25:04 root maldet(24260): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 25 03:25:04 root maldet(24260): {scan} scan of (1917 files) in progress... Jul 25 03:25:41 root maldet(24260): {hit} malware hit {YARA}eval_post found for /home/srgtechn/public_html/wp-xml1pc.php Jul 25 03:25:41 root maldet(24260): {quar} malware quarantined from '/home/srgtechn/public_html/wp-xml1pc.php' to '/usr/local/maldetect/quarantine/wp-xml1pc.php.2826513423' Jul 25 03:25:41 root maldet(24260): {scan} scan completed on : files 1917, malware hits 1, cleaned hits 0, time 40s Jul 25 03:25:41 root maldet(24260): {scan} scan report saved, to view run: maldet --report 190725-0325.24260 Jul 26 03:38:16 root maldet(19038): {update} checking for available updates... Jul 26 03:38:16 root maldet(19038): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 26 03:38:16 root maldet(19038): {update} hashing install files and checking against server... Jul 26 03:38:17 root maldet(19038): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 26 03:38:17 root maldet(19038): {update} latest version already installed. Jul 26 03:38:17 root maldet(19175): {sigup} performing signature update check... Jul 26 03:38:17 root maldet(19175): {sigup} local signature set is version 2019072229937 Jul 26 03:38:17 root maldet(19175): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 26 03:38:17 root maldet(19175): {sigup} new signature set 2019072526031 available Jul 26 03:38:17 root maldet(19175): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 26 03:38:18 root maldet(19175): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 26 03:38:18 root maldet(19175): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 26 03:38:18 root maldet(19175): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 26 03:38:18 root maldet(19175): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 26 03:38:18 root maldet(19175): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 26 03:38:18 root maldet(19175): {sigup} verified md5sum of maldet-sigpack.tgz Jul 26 03:38:18 root maldet(19175): {sigup} unpacked and installed maldet-sigpack.tgz Jul 26 03:38:18 root maldet(19175): {sigup} verified md5sum of maldet-clean.tgz Jul 26 03:38:18 root maldet(19175): {sigup} unpacked and installed maldet-clean.tgz Jul 26 03:38:18 root maldet(19175): {sigup} signature set update completed Jul 26 03:38:19 root maldet(19175): {sigup} 15549 signatures (12737 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 26 03:38:19 root maldet(19411): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 26 03:38:46 root maldet(19411): {scan} signatures loaded: 15549 (12737 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 26 03:38:46 root maldet(19411): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 26 03:38:46 root maldet(19411): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 26 03:38:46 root maldet(19411): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 26 03:38:48 root maldet(19411): {scan} file list completed in 2s, found 313 files... Jul 26 03:38:48 root maldet(19411): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 26 03:38:48 root maldet(19411): {scan} scan of (313 files) in progress... Jul 26 03:39:09 root maldet(19411): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Jul 26 03:39:09 root maldet(19411): {scan} scan completed on : files 313, malware hits 0, cleaned hits 0, time 50s Jul 26 03:39:09 root maldet(19411): {scan} scan report saved, to view run: maldet --report 190726-0338.19411 Jul 27 03:39:22 root maldet(14335): {update} checking for available updates... Jul 27 03:39:23 root maldet(14335): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 27 03:39:23 root maldet(14335): {update} hashing install files and checking against server... Jul 27 03:39:24 root maldet(14335): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 27 03:39:24 root maldet(14335): {update} latest version already installed. Jul 27 03:39:24 root maldet(14469): {sigup} performing signature update check... Jul 27 03:39:24 root maldet(14469): {sigup} local signature set is version 2019072526031 Jul 27 03:39:24 root maldet(14469): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 27 03:39:24 root maldet(14469): {sigup} latest signature set already installed Jul 27 03:39:25 root maldet(14580): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 27 03:39:25 root maldet(14580): {scan} signatures loaded: 15549 (12737 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 27 03:39:25 root maldet(14580): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 27 03:39:25 root maldet(14580): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 27 03:39:25 root maldet(14580): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 27 03:39:27 root maldet(14580): {scan} file list completed in 2s, found 525 files... Jul 27 03:39:27 root maldet(14580): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 27 03:39:27 root maldet(14580): {scan} scan of (525 files) in progress... Jul 27 03:39:41 root maldet(14580): {scan} scan completed on : files 525, malware hits 0, cleaned hits 0, time 16s Jul 27 03:39:41 root maldet(14580): {scan} scan report saved, to view run: maldet --report 190727-0339.14580 Jul 28 03:18:37 root maldet(12351): {update} checking for available updates... Jul 28 03:18:38 root maldet(12351): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 28 03:18:38 root maldet(12351): {update} hashing install files and checking against server... Jul 28 03:18:39 root maldet(12351): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 28 03:18:39 root maldet(12351): {update} latest version already installed. Jul 28 03:18:39 root maldet(12488): {sigup} performing signature update check... Jul 28 03:18:39 root maldet(12488): {sigup} local signature set is version 2019072526031 Jul 28 03:18:40 root maldet(12488): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 28 03:18:40 root maldet(12488): {sigup} latest signature set already installed Jul 28 03:18:40 root maldet(12606): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 28 03:18:44 root maldet(12606): {scan} signatures loaded: 15549 (12737 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 28 03:18:44 root maldet(12606): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 28 03:18:44 root maldet(12606): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 28 03:18:44 root maldet(12606): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 28 03:25:09 root maldet(12606): {scan} file list completed in 385s, found 144 files... Jul 28 03:25:09 root maldet(12606): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 28 03:25:09 root maldet(12606): {scan} scan of (144 files) in progress... Jul 28 03:26:31 root maldet(12606): {scan} scan completed on : files 144, malware hits 0, cleaned hits 0, time 471s Jul 28 03:26:31 root maldet(12606): {scan} scan report saved, to view run: maldet --report 190728-0318.12606 Jul 29 03:45:24 root maldet(20985): {update} checking for available updates... Jul 29 03:45:25 root maldet(20985): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 29 03:45:25 root maldet(20985): {update} hashing install files and checking against server... Jul 29 03:45:25 root maldet(20985): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 29 03:45:25 root maldet(20985): {update} latest version already installed. Jul 29 03:45:25 root maldet(21121): {sigup} performing signature update check... Jul 29 03:45:25 root maldet(21121): {sigup} local signature set is version 2019072526031 Jul 29 03:45:26 root maldet(21121): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 29 03:45:26 root maldet(21121): {sigup} new signature set 2019072821552 available Jul 29 03:45:26 root maldet(21121): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 29 03:45:27 root maldet(21121): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 29 03:45:27 root maldet(21121): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 29 03:45:27 root maldet(21121): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 29 03:45:28 root maldet(21121): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 29 03:45:28 root maldet(21121): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 29 03:45:28 root maldet(21121): {sigup} verified md5sum of maldet-sigpack.tgz Jul 29 03:45:28 root maldet(21121): {sigup} unpacked and installed maldet-sigpack.tgz Jul 29 03:45:28 root maldet(21121): {sigup} verified md5sum of maldet-clean.tgz Jul 29 03:45:28 root maldet(21121): {sigup} unpacked and installed maldet-clean.tgz Jul 29 03:45:28 root maldet(21121): {sigup} signature set update completed Jul 29 03:45:28 root maldet(21121): {sigup} 15549 signatures (12737 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 29 03:45:28 root maldet(21363): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 29 03:45:58 root maldet(21363): {scan} signatures loaded: 15549 (12737 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 29 03:45:58 root maldet(21363): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 29 03:45:58 root maldet(21363): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 29 03:45:58 root maldet(21363): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 29 03:46:00 root maldet(21363): {scan} file list completed in 2s, found 2279 files... Jul 29 03:46:00 root maldet(21363): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 29 03:46:00 root maldet(21363): {scan} scan of (2279 files) in progress... Jul 29 03:46:56 root maldet(21363): {scan} scan completed on : files 2279, malware hits 0, cleaned hits 0, time 87s Jul 29 03:46:56 root maldet(21363): {scan} scan report saved, to view run: maldet --report 190729-0345.21363 Jul 30 03:35:07 root maldet(12776): {update} checking for available updates... Jul 30 03:35:07 root maldet(12776): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 30 03:35:07 root maldet(12776): {update} hashing install files and checking against server... Jul 30 03:35:08 root maldet(12776): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 30 03:35:08 root maldet(12776): {update} latest version already installed. Jul 30 03:35:08 root maldet(12911): {sigup} performing signature update check... Jul 30 03:35:08 root maldet(12911): {sigup} local signature set is version 2019072821552 Jul 30 03:35:09 root maldet(12911): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 30 03:35:09 root maldet(12911): {sigup} latest signature set already installed Jul 30 03:35:09 root maldet(13024): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 30 03:35:09 root maldet(13024): {scan} signatures loaded: 15549 (12737 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 30 03:35:09 root maldet(13024): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 30 03:35:09 root maldet(13024): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 30 03:35:09 root maldet(13024): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 30 03:35:11 root maldet(13024): {scan} file list completed in 2s, found 153 files... Jul 30 03:35:11 root maldet(13024): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 30 03:35:11 root maldet(13024): {scan} scan of (153 files) in progress... Jul 30 03:35:22 root maldet(13024): {scan} scan completed on : files 153, malware hits 0, cleaned hits 0, time 13s Jul 30 03:35:22 root maldet(13024): {scan} scan report saved, to view run: maldet --report 190730-0335.13024 Jul 31 03:08:20 root maldet(20120): {update} checking for available updates... Jul 31 03:08:21 root maldet(20120): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 31 03:08:21 root maldet(20120): {update} hashing install files and checking against server... Jul 31 03:08:21 root maldet(20120): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 31 03:08:21 root maldet(20120): {update} latest version already installed. Jul 31 03:08:21 root maldet(20257): {sigup} performing signature update check... Jul 31 03:08:21 root maldet(20257): {sigup} local signature set is version 2019072821552 Jul 31 03:08:22 root maldet(20257): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 31 03:08:22 root maldet(20257): {sigup} latest signature set already installed Jul 31 03:08:22 root maldet(20368): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 31 03:08:22 root maldet(20368): {scan} signatures loaded: 15549 (12737 MD5 | 2035 HEX | 777 YARA | 0 USER) Jul 31 03:08:22 root maldet(20368): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 31 03:08:22 root maldet(20368): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 31 03:08:22 root maldet(20368): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 31 03:08:24 root maldet(20368): {scan} file list completed in 2s, found 262 files... Jul 31 03:08:24 root maldet(20368): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 31 03:08:24 root maldet(20368): {scan} scan of (262 files) in progress... Jul 31 03:08:37 root maldet(20368): {scan} scan completed on : files 262, malware hits 0, cleaned hits 0, time 15s Jul 31 03:08:37 root maldet(20368): {scan} scan report saved, to view run: maldet --report 190731-0308.20368 Aug 01 03:50:12 root maldet(8444): {update} checking for available updates... Aug 01 03:50:14 root maldet(8444): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 01 03:50:14 root maldet(8444): {update} hashing install files and checking against server... Aug 01 03:50:14 root maldet(8444): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 01 03:50:14 root maldet(8444): {update} latest version already installed. Aug 01 03:50:14 root maldet(8592): {sigup} performing signature update check... Aug 01 03:50:14 root maldet(8592): {sigup} local signature set is version 2019072821552 Aug 01 03:50:15 root maldet(8592): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 01 03:50:15 root maldet(8592): {sigup} new signature set 2019073117845 available Aug 01 03:50:15 root maldet(8592): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 01 03:50:16 root maldet(8592): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 01 03:50:16 root maldet(8592): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Aug 01 03:50:16 root maldet(8592): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 01 03:50:17 root maldet(8592): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 01 03:50:17 root maldet(8592): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Aug 01 03:50:17 root maldet(8592): {sigup} verified md5sum of maldet-sigpack.tgz Aug 01 03:50:18 root maldet(8592): {sigup} unpacked and installed maldet-sigpack.tgz Aug 01 03:50:18 root maldet(8592): {sigup} verified md5sum of maldet-clean.tgz Aug 01 03:50:18 root maldet(8592): {sigup} unpacked and installed maldet-clean.tgz Aug 01 03:50:18 root maldet(8592): {sigup} signature set update completed Aug 01 03:50:18 root maldet(8592): {sigup} 15549 signatures (12737 MD5 | 2035 HEX | 777 YARA | 0 USER) Aug 01 03:50:18 root maldet(8896): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 01 03:50:59 root maldet(8896): {scan} signatures loaded: 15549 (12737 MD5 | 2035 HEX | 777 YARA | 0 USER) Aug 01 03:50:59 root maldet(8896): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 01 03:50:59 root maldet(8896): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 01 03:50:59 root maldet(8896): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 01 03:56:56 root maldet(8896): {scan} file list completed in 357s, found 1126 files... Aug 01 03:56:56 root maldet(8896): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 01 03:56:56 root maldet(8896): {scan} scan of (1126 files) in progress... Aug 01 03:58:01 root maldet(8896): {scan} scan completed on : files 1126, malware hits 0, cleaned hits 0, time 462s Aug 01 03:58:01 root maldet(8896): {scan} scan report saved, to view run: maldet --report 190801-0350.8896 Aug 02 03:18:15 root maldet(4466): {update} checking for available updates... Aug 02 03:18:16 root maldet(4466): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 02 03:18:16 root maldet(4466): {update} hashing install files and checking against server... Aug 02 03:18:16 root maldet(4466): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 02 03:18:16 root maldet(4466): {update} latest version already installed. Aug 02 03:18:16 root maldet(4600): {sigup} performing signature update check... Aug 02 03:18:16 root maldet(4600): {sigup} local signature set is version 2019073117845 Aug 02 03:18:17 root maldet(4600): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 02 03:18:17 root maldet(4600): {sigup} new signature set 2019080132307 available Aug 02 03:18:17 root maldet(4600): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 02 03:18:18 root maldet(4600): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 02 03:18:18 root maldet(4600): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Aug 02 03:18:18 root maldet(4600): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 02 03:18:19 root maldet(4600): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 02 03:18:19 root maldet(4600): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Aug 02 03:18:19 root maldet(4600): {sigup} verified md5sum of maldet-sigpack.tgz Aug 02 03:18:19 root maldet(4600): {sigup} unpacked and installed maldet-sigpack.tgz Aug 02 03:18:19 root maldet(4600): {sigup} verified md5sum of maldet-clean.tgz Aug 02 03:18:19 root maldet(4600): {sigup} unpacked and installed maldet-clean.tgz Aug 02 03:18:19 root maldet(4600): {sigup} signature set update completed Aug 02 03:18:20 root maldet(4600): {sigup} 15549 signatures (12737 MD5 | 2035 HEX | 777 YARA | 0 USER) Aug 02 03:18:20 root maldet(4840): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 02 03:18:49 root maldet(4840): {scan} signatures loaded: 15549 (12737 MD5 | 2035 HEX | 777 YARA | 0 USER) Aug 02 03:18:49 root maldet(4840): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 02 03:18:49 root maldet(4840): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 02 03:18:49 root maldet(4840): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 02 03:18:51 root maldet(4840): {scan} file list completed in 2s, found 6700 files... Aug 02 03:18:51 root maldet(4840): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 02 03:18:51 root maldet(4840): {scan} scan of (6700 files) in progress... Aug 02 03:19:46 root maldet(4840): {scan} scan completed on : files 6700, malware hits 0, cleaned hits 0, time 86s Aug 02 03:19:46 root maldet(4840): {scan} scan report saved, to view run: maldet --report 190802-0318.4840 Aug 03 03:13:52 root maldet(13924): {update} checking for available updates... Aug 03 03:13:53 root maldet(13924): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 03 03:13:53 root maldet(13924): {update} hashing install files and checking against server... Aug 03 03:13:53 root maldet(13924): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 03 03:13:53 root maldet(13924): {update} latest version already installed. Aug 03 03:13:53 root maldet(14059): {sigup} performing signature update check... Aug 03 03:13:53 root maldet(14059): {sigup} local signature set is version 2019080132307 Aug 03 03:13:54 root maldet(14059): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 03 03:13:54 root maldet(14059): {sigup} latest signature set already installed Aug 03 03:13:54 root maldet(14171): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 03 03:13:55 root maldet(14171): {scan} signatures loaded: 15549 (12737 MD5 | 2035 HEX | 777 YARA | 0 USER) Aug 03 03:13:55 root maldet(14171): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 03 03:13:55 root maldet(14171): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 03 03:13:55 root maldet(14171): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 03 03:13:57 root maldet(14171): {scan} file list completed in 2s, found 2408 files... Aug 03 03:13:57 root maldet(14171): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 03 03:13:57 root maldet(14171): {scan} scan of (2408 files) in progress... Aug 03 03:14:33 root maldet(14171): {scan} scan completed on : files 2408, malware hits 0, cleaned hits 0, time 39s Aug 03 03:14:33 root maldet(14171): {scan} scan report saved, to view run: maldet --report 190803-0313.14171 Aug 04 03:49:39 root maldet(19791): {update} checking for available updates... Aug 04 03:49:40 root maldet(19791): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 04 03:49:40 root maldet(19791): {update} hashing install files and checking against server... Aug 04 03:49:41 root maldet(19791): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 04 03:49:41 root maldet(19791): {update} latest version already installed. Aug 04 03:49:41 root maldet(19926): {sigup} performing signature update check... Aug 04 03:49:41 root maldet(19926): {sigup} local signature set is version 2019080132307 Aug 04 03:49:41 root maldet(19926): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 04 03:49:42 root maldet(19926): {sigup} latest signature set already installed Aug 04 03:49:42 root maldet(20044): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 04 03:49:47 root maldet(20044): {scan} signatures loaded: 15549 (12737 MD5 | 2035 HEX | 777 YARA | 0 USER) Aug 04 03:49:47 root maldet(20044): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 04 03:49:47 root maldet(20044): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 04 03:49:47 root maldet(20044): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 04 03:57:19 root maldet(20044): {scan} file list completed in 452s, found 1077 files... Aug 04 03:57:19 root maldet(20044): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 04 03:57:19 root maldet(20044): {scan} scan of (1077 files) in progress... Aug 04 03:58:10 root maldet(20044): {scan} scan completed on : files 1077, malware hits 0, cleaned hits 0, time 508s Aug 04 03:58:10 root maldet(20044): {scan} scan report saved, to view run: maldet --report 190804-0349.20044 Aug 05 03:53:32 root maldet(14598): {update} checking for available updates... Aug 05 03:53:33 root maldet(14598): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 05 03:53:33 root maldet(14598): {update} hashing install files and checking against server... Aug 05 03:53:33 root maldet(14598): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 05 03:53:33 root maldet(14598): {update} latest version already installed. Aug 05 03:53:33 root maldet(14735): {sigup} performing signature update check... Aug 05 03:53:33 root maldet(14735): {sigup} local signature set is version 2019080132307 Aug 05 03:53:33 root maldet(14735): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 05 03:53:33 root maldet(14735): {sigup} new signature set 2019080428438 available Aug 05 03:53:33 root maldet(14735): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 05 03:53:33 root maldet(14735): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 05 03:53:34 root maldet(14735): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Aug 05 03:53:34 root maldet(14735): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 05 03:53:34 root maldet(14735): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 05 03:53:34 root maldet(14735): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Aug 05 03:53:34 root maldet(14735): {sigup} verified md5sum of maldet-sigpack.tgz Aug 05 03:53:34 root maldet(14735): {sigup} unpacked and installed maldet-sigpack.tgz Aug 05 03:53:34 root maldet(14735): {sigup} verified md5sum of maldet-clean.tgz Aug 05 03:53:34 root maldet(14735): {sigup} unpacked and installed maldet-clean.tgz Aug 05 03:53:34 root maldet(14735): {sigup} signature set update completed Aug 05 03:53:34 root maldet(14735): {sigup} 15549 signatures (12737 MD5 | 2035 HEX | 777 YARA | 0 USER) Aug 05 03:53:34 root maldet(14972): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 05 03:54:04 root maldet(14972): {scan} signatures loaded: 15549 (12737 MD5 | 2035 HEX | 777 YARA | 0 USER) Aug 05 03:54:04 root maldet(14972): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 05 03:54:04 root maldet(14972): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 05 03:54:04 root maldet(14972): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 05 03:54:06 root maldet(14972): {scan} file list completed in 2s, found 249 files... Aug 05 03:54:06 root maldet(14972): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 05 03:54:06 root maldet(14972): {scan} scan of (249 files) in progress... Aug 05 03:54:21 root maldet(14972): {scan} scan completed on : files 249, malware hits 0, cleaned hits 0, time 47s Aug 05 03:54:21 root maldet(14972): {scan} scan report saved, to view run: maldet --report 190805-0353.14972 Aug 06 03:31:55 root maldet(23783): {update} checking for available updates... Aug 06 03:31:56 root maldet(23783): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 06 03:31:56 root maldet(23783): {update} hashing install files and checking against server... Aug 06 03:31:56 root maldet(23783): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 06 03:31:56 root maldet(23783): {update} latest version already installed. Aug 06 03:31:56 root maldet(23917): {sigup} performing signature update check... Aug 06 03:31:56 root maldet(23917): {sigup} local signature set is version 2019080428438 Aug 06 03:31:56 root maldet(23917): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 06 03:31:56 root maldet(23917): {sigup} latest signature set already installed Aug 06 03:31:56 root maldet(24029): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 06 03:31:57 root maldet(24029): {scan} signatures loaded: 15549 (12737 MD5 | 2035 HEX | 777 YARA | 0 USER) Aug 06 03:31:57 root maldet(24029): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 06 03:31:57 root maldet(24029): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 06 03:31:57 root maldet(24029): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 06 03:31:59 root maldet(24029): {scan} file list completed in 2s, found 1713 files... Aug 06 03:31:59 root maldet(24029): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 06 03:31:59 root maldet(24029): {scan} scan of (1713 files) in progress... Aug 06 03:32:17 root maldet(24029): {hit} malware hit {YARA}eval_post found for /home/srgtechn/public_html/wp-xml1pc.php Aug 06 03:32:17 root maldet(24029): {quar} malware quarantined from '/home/srgtechn/public_html/wp-xml1pc.php' to '/usr/local/maldetect/quarantine/wp-xml1pc.php.770314234' Aug 06 03:32:17 root maldet(24029): {scan} scan completed on : files 1713, malware hits 1, cleaned hits 0, time 21s Aug 06 03:32:17 root maldet(24029): {scan} scan report saved, to view run: maldet --report 190806-0331.24029 Aug 07 03:43:09 root maldet(7842): {update} checking for available updates... Aug 07 03:43:10 root maldet(7842): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 07 03:43:10 root maldet(7842): {update} hashing install files and checking against server... Aug 07 03:43:10 root maldet(7842): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 07 03:43:10 root maldet(7842): {update} latest version already installed. Aug 07 03:43:10 root maldet(7978): {sigup} performing signature update check... Aug 07 03:43:10 root maldet(7978): {sigup} local signature set is version 2019080428438 Aug 07 03:43:10 root maldet(7978): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 07 03:43:10 root maldet(7978): {sigup} latest signature set already installed Aug 07 03:43:10 root maldet(8095): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 07 03:43:11 root maldet(8095): {scan} signatures loaded: 15549 (12737 MD5 | 2035 HEX | 777 YARA | 0 USER) Aug 07 03:43:11 root maldet(8095): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 07 03:43:11 root maldet(8095): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 07 03:43:11 root maldet(8095): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 07 03:43:13 root maldet(8095): {scan} file list completed in 2s, found 4870 files... Aug 07 03:43:13 root maldet(8095): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 07 03:43:13 root maldet(8095): {scan} scan of (4870 files) in progress... Aug 07 03:43:46 root maldet(8095): {hit} malware hit {YARA}eval_post found for /home/srgtechn/public_html/wp-xml1pc.php Aug 07 03:43:47 root maldet(8095): {quar} malware quarantined from '/home/srgtechn/public_html/wp-xml1pc.php' to '/usr/local/maldetect/quarantine/wp-xml1pc.php.1039725691' Aug 07 03:43:47 root maldet(8095): {scan} scan completed on : files 4870, malware hits 1, cleaned hits 0, time 37s Aug 07 03:43:47 root maldet(8095): {scan} scan report saved, to view run: maldet --report 190807-0343.8095 Aug 08 03:45:53 root maldet(11894): {update} checking for available updates... Aug 08 03:45:53 root maldet(11894): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 08 03:45:53 root maldet(11894): {update} hashing install files and checking against server... Aug 08 03:45:53 root maldet(11894): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 08 03:45:53 root maldet(11894): {update} latest version already installed. Aug 08 03:45:53 root maldet(12037): {sigup} performing signature update check... Aug 08 03:45:53 root maldet(12037): {sigup} local signature set is version 2019080428438 Aug 08 03:45:54 root maldet(12037): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 08 03:45:54 root maldet(12037): {sigup} new signature set 2019080724962 available Aug 08 03:45:54 root maldet(12037): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 08 03:45:54 root maldet(12037): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 08 03:45:54 root maldet(12037): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Aug 08 03:45:54 root maldet(12037): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 08 03:45:54 root maldet(12037): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 08 03:45:54 root maldet(12037): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Aug 08 03:45:54 root maldet(12037): {sigup} verified md5sum of maldet-sigpack.tgz Aug 08 03:45:55 root maldet(12037): {sigup} unpacked and installed maldet-sigpack.tgz Aug 08 03:45:55 root maldet(12037): {sigup} verified md5sum of maldet-clean.tgz Aug 08 03:45:55 root maldet(12037): {sigup} unpacked and installed maldet-clean.tgz Aug 08 03:45:55 root maldet(12037): {sigup} signature set update completed Aug 08 03:45:55 root maldet(12037): {sigup} 15550 signatures (12738 MD5 | 2035 HEX | 777 YARA | 0 USER) Aug 08 03:45:55 root maldet(12276): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 08 03:46:25 root maldet(12276): {scan} signatures loaded: 15550 (12738 MD5 | 2035 HEX | 777 YARA | 0 USER) Aug 08 03:46:25 root maldet(12276): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 08 03:46:25 root maldet(12276): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 08 03:46:25 root maldet(12276): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 08 03:46:27 root maldet(12276): {scan} file list completed in 2s, found 1672 files... Aug 08 03:46:27 root maldet(12276): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 08 03:46:27 root maldet(12276): {scan} scan of (1672 files) in progress... Aug 08 03:46:58 root maldet(12276): {scan} scan completed on : files 1672, malware hits 0, cleaned hits 0, time 63s Aug 08 03:46:58 root maldet(12276): {scan} scan report saved, to view run: maldet --report 190808-0345.12276 Aug 09 03:40:11 root maldet(15143): {update} checking for available updates... Aug 09 03:40:12 root maldet(15143): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 09 03:40:12 root maldet(15143): {update} hashing install files and checking against server... Aug 09 03:40:12 root maldet(15143): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 09 03:40:12 root maldet(15143): {update} latest version already installed. Aug 09 03:40:12 root maldet(15276): {sigup} performing signature update check... Aug 09 03:40:12 root maldet(15276): {sigup} local signature set is version 2019080724962 Aug 09 03:40:12 root maldet(15276): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 09 03:40:12 root maldet(15276): {sigup} latest signature set already installed Aug 09 03:40:12 root maldet(15389): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 09 03:40:13 root maldet(15389): {scan} signatures loaded: 15550 (12738 MD5 | 2035 HEX | 777 YARA | 0 USER) Aug 09 03:40:13 root maldet(15389): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 09 03:40:13 root maldet(15389): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 09 03:40:13 root maldet(15389): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 09 03:40:15 root maldet(15389): {scan} file list completed in 2s, found 1661 files... Aug 09 03:40:15 root maldet(15389): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 09 03:40:15 root maldet(15389): {scan} scan of (1661 files) in progress... Aug 09 03:40:40 root maldet(15389): {hit} malware hit {YARA}eval_post found for /home/srgtechn/public_html/wp-xml1pc.php Aug 09 03:40:40 root maldet(15389): {quar} malware quarantined from '/home/srgtechn/public_html/wp-xml1pc.php' to '/usr/local/maldetect/quarantine/wp-xml1pc.php.107581003' Aug 09 03:40:40 root maldet(15389): {hit} malware hit {HEX}php.generic.malware.442 found for /home/srgtechn/public_html/index.php Aug 09 03:40:40 root maldet(15389): {quar} malware quarantined from '/home/srgtechn/public_html/index.php' to '/usr/local/maldetect/quarantine/index.php.2273532496' Aug 09 03:40:41 root maldet(15389): {scan} scan completed on : files 1661, malware hits 2, cleaned hits 0, time 28s Aug 09 03:40:41 root maldet(15389): {scan} scan report saved, to view run: maldet --report 190809-0340.15389 Aug 10 03:29:17 root maldet(26254): {update} checking for available updates... Aug 10 03:29:17 root maldet(26254): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 10 03:29:17 root maldet(26254): {update} hashing install files and checking against server... Aug 10 03:29:17 root maldet(26254): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 10 03:29:17 root maldet(26254): {update} latest version already installed. Aug 10 03:29:17 root maldet(26389): {sigup} performing signature update check... Aug 10 03:29:17 root maldet(26389): {sigup} local signature set is version 2019080724962 Aug 10 03:29:18 root maldet(26389): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 10 03:29:18 root maldet(26389): {sigup} latest signature set already installed Aug 10 03:29:18 root maldet(26501): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 10 03:29:18 root maldet(26501): {scan} signatures loaded: 15550 (12738 MD5 | 2035 HEX | 777 YARA | 0 USER) Aug 10 03:29:18 root maldet(26501): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 10 03:29:18 root maldet(26501): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 10 03:29:18 root maldet(26501): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 10 03:29:20 root maldet(26501): {scan} file list completed in 2s, found 541 files... Aug 10 03:29:20 root maldet(26501): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 10 03:29:20 root maldet(26501): {scan} scan of (541 files) in progress... Aug 10 03:29:37 root maldet(26501): {hit} malware hit {YARA}eval_post found for /home/srgtechn/public_html/wp-xml1pc.php Aug 10 03:29:37 root maldet(26501): {quar} malware quarantined from '/home/srgtechn/public_html/wp-xml1pc.php' to '/usr/local/maldetect/quarantine/wp-xml1pc.php.264185388' Aug 10 03:29:37 root maldet(26501): {scan} scan completed on : files 541, malware hits 1, cleaned hits 0, time 19s Aug 10 03:29:37 root maldet(26501): {scan} scan report saved, to view run: maldet --report 190810-0329.26501 Aug 11 03:26:25 root maldet(8668): {update} checking for available updates... Aug 11 03:26:26 root maldet(8668): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 11 03:26:26 root maldet(8668): {update} hashing install files and checking against server... Aug 11 03:26:27 root maldet(8668): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 11 03:26:27 root maldet(8668): {update} latest version already installed. Aug 11 03:26:27 root maldet(8811): {sigup} performing signature update check... Aug 11 03:26:27 root maldet(8811): {sigup} local signature set is version 2019080724962 Aug 11 03:26:27 root maldet(8811): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 11 03:26:27 root maldet(8811): {sigup} new signature set 2019081023239 available Aug 11 03:26:27 root maldet(8811): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 11 03:26:28 root maldet(8811): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 11 03:26:28 root maldet(8811): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Aug 11 03:26:28 root maldet(8811): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 11 03:26:28 root maldet(8811): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 11 03:26:28 root maldet(8811): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Aug 11 03:26:28 root maldet(8811): {sigup} verified md5sum of maldet-sigpack.tgz Aug 11 03:26:28 root maldet(8811): {sigup} unpacked and installed maldet-sigpack.tgz Aug 11 03:26:29 root maldet(8811): {sigup} verified md5sum of maldet-clean.tgz Aug 11 03:26:29 root maldet(8811): {sigup} unpacked and installed maldet-clean.tgz Aug 11 03:26:29 root maldet(8811): {sigup} signature set update completed Aug 11 03:26:29 root maldet(8811): {sigup} 15550 signatures (12738 MD5 | 2035 HEX | 777 YARA | 0 USER) Aug 11 03:26:29 root maldet(9057): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 11 03:27:16 root maldet(9057): {scan} signatures loaded: 15550 (12738 MD5 | 2035 HEX | 777 YARA | 0 USER) Aug 11 03:27:16 root maldet(9057): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 11 03:27:16 root maldet(9057): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 11 03:27:16 root maldet(9057): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 11 03:34:20 root maldet(9057): {scan} file list completed in 424s, found 131 files... Aug 11 03:34:20 root maldet(9057): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 11 03:34:20 root maldet(9057): {scan} scan of (131 files) in progress... Aug 11 03:34:54 root maldet(9057): {hit} malware hit {YARA}eval_post found for /home/srgtechn/public_html/wp-xml1pc.php Aug 11 03:34:55 root maldet(9057): {quar} malware quarantined from '/home/srgtechn/public_html/wp-xml1pc.php' to '/usr/local/maldetect/quarantine/wp-xml1pc.php.940817663' Aug 11 03:34:55 root maldet(9057): {quar} fatal error handling '/home/srgtechn/public_html/index.php' Aug 11 03:34:55 root maldet(9057): {scan} scan completed on : files 131, malware hits 1, cleaned hits 0, time 506s Aug 11 03:34:55 root maldet(9057): {scan} scan report saved, to view run: maldet --report 190811-0326.9057 Aug 12 03:51:13 root maldet(4938): {update} checking for available updates... Aug 12 03:51:13 root maldet(4938): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 12 03:51:13 root maldet(4938): {update} hashing install files and checking against server... Aug 12 03:51:13 root maldet(4938): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 12 03:51:13 root maldet(4938): {update} latest version already installed. Aug 12 03:51:14 root maldet(5071): {sigup} performing signature update check... Aug 12 03:51:14 root maldet(5071): {sigup} local signature set is version 2019081023239 Aug 12 03:51:14 root maldet(5071): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 12 03:51:14 root maldet(5071): {sigup} latest signature set already installed Aug 12 03:51:14 root maldet(5182): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 12 03:51:15 root maldet(5182): {scan} signatures loaded: 15550 (12738 MD5 | 2035 HEX | 777 YARA | 0 USER) Aug 12 03:51:15 root maldet(5182): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 12 03:51:15 root maldet(5182): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 12 03:51:15 root maldet(5182): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 12 03:51:17 root maldet(5182): {scan} file list completed in 2s, found 1222 files... Aug 12 03:51:17 root maldet(5182): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 12 03:51:17 root maldet(5182): {scan} scan of (1222 files) in progress... Aug 12 03:51:36 root maldet(5182): {hit} malware hit {YARA}eval_post found for /home/srgtechn/public_html/wp-xml1pc.php Aug 12 03:51:36 root maldet(5182): {quar} malware quarantined from '/home/srgtechn/public_html/wp-xml1pc.php' to '/usr/local/maldetect/quarantine/wp-xml1pc.php.1206027942' Aug 12 03:51:36 root maldet(5182): {scan} scan completed on : files 1222, malware hits 1, cleaned hits 0, time 22s Aug 12 03:51:36 root maldet(5182): {scan} scan report saved, to view run: maldet --report 190812-0351.5182 Aug 13 03:49:56 root maldet(20939): {update} checking for available updates... Aug 13 03:49:56 root maldet(20939): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 13 03:49:56 root maldet(20939): {update} hashing install files and checking against server... Aug 13 03:49:57 root maldet(20939): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 13 03:49:57 root maldet(20939): {update} latest version already installed. Aug 13 03:49:57 root maldet(21074): {sigup} performing signature update check... Aug 13 03:49:57 root maldet(21074): {sigup} local signature set is version 2019081023239 Aug 13 03:49:57 root maldet(21074): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 13 03:49:57 root maldet(21074): {sigup} latest signature set already installed Aug 13 03:49:57 root maldet(21186): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 13 03:49:57 root maldet(21186): {scan} signatures loaded: 15550 (12738 MD5 | 2035 HEX | 777 YARA | 0 USER) Aug 13 03:49:57 root maldet(21186): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 13 03:49:57 root maldet(21186): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 13 03:49:57 root maldet(21186): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 13 03:50:00 root maldet(21186): {scan} file list completed in 3s, found 105 files... Aug 13 03:50:00 root maldet(21186): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 13 03:50:00 root maldet(21186): {scan} scan of (105 files) in progress... Aug 13 03:50:11 root maldet(21186): {hit} malware hit {YARA}eval_post found for /home/srgtechn/public_html/wp-xml1pc.php Aug 13 03:50:11 root maldet(21186): {quar} malware quarantined from '/home/srgtechn/public_html/wp-xml1pc.php' to '/usr/local/maldetect/quarantine/wp-xml1pc.php.59622371' Aug 13 03:50:11 root maldet(21186): {scan} scan completed on : files 105, malware hits 1, cleaned hits 0, time 14s Aug 13 03:50:11 root maldet(21186): {scan} scan report saved, to view run: maldet --report 190813-0349.21186 Aug 14 03:24:33 root maldet(433): {update} checking for available updates... Aug 14 03:24:33 root maldet(433): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 14 03:24:33 root maldet(433): {update} hashing install files and checking against server... Aug 14 03:24:33 root maldet(433): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 14 03:24:33 root maldet(433): {update} latest version already installed. Aug 14 03:24:33 root maldet(577): {sigup} performing signature update check... Aug 14 03:24:33 root maldet(577): {sigup} local signature set is version 2019081023239 Aug 14 03:24:33 root maldet(577): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 14 03:24:33 root maldet(577): {sigup} new signature set 2019081323971 available Aug 14 03:24:33 root maldet(577): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 14 03:24:34 root maldet(577): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 14 03:24:34 root maldet(577): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Aug 14 03:24:34 root maldet(577): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 14 03:24:34 root maldet(577): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 14 03:24:34 root maldet(577): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Aug 14 03:24:34 root maldet(577): {sigup} verified md5sum of maldet-sigpack.tgz Aug 14 03:24:34 root maldet(577): {sigup} unpacked and installed maldet-sigpack.tgz Aug 14 03:24:34 root maldet(577): {sigup} verified md5sum of maldet-clean.tgz Aug 14 03:24:34 root maldet(577): {sigup} unpacked and installed maldet-clean.tgz Aug 14 03:24:34 root maldet(577): {sigup} signature set update completed Aug 14 03:24:34 root maldet(577): {sigup} 15550 signatures (12738 MD5 | 2035 HEX | 777 YARA | 0 USER) Aug 14 03:24:34 root maldet(838): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 14 03:25:05 root maldet(838): {scan} signatures loaded: 15550 (12738 MD5 | 2035 HEX | 777 YARA | 0 USER) Aug 14 03:25:05 root maldet(838): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 14 03:25:05 root maldet(838): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 14 03:25:05 root maldet(838): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 14 03:25:08 root maldet(838): {scan} file list completed in 3s, found 447 files... Aug 14 03:25:08 root maldet(838): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 14 03:25:08 root maldet(838): {scan} scan of (447 files) in progress... Aug 14 03:25:29 root maldet(838): {hit} malware hit {YARA}eval_post found for /home/srgtechn/public_html/wp-xml1pc.php Aug 14 03:25:29 root maldet(838): {quar} malware quarantined from '/home/srgtechn/public_html/wp-xml1pc.php' to '/usr/local/maldetect/quarantine/wp-xml1pc.php.1990319465' Aug 14 03:25:29 root maldet(838): {scan} scan completed on : files 447, malware hits 1, cleaned hits 0, time 55s Aug 14 03:25:29 root maldet(838): {scan} scan report saved, to view run: maldet --report 190814-0324.838 Aug 15 03:43:45 root maldet(24835): {update} checking for available updates... Aug 15 03:43:45 root maldet(24835): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 15 03:43:46 root maldet(24835): {update} hashing install files and checking against server... Aug 15 03:43:46 root maldet(24835): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 15 03:43:46 root maldet(24835): {update} latest version already installed. Aug 15 03:43:46 root maldet(24969): {sigup} performing signature update check... Aug 15 03:43:46 root maldet(24969): {sigup} local signature set is version 2019081323971 Aug 15 03:43:46 root maldet(24969): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 15 03:43:46 root maldet(24969): {sigup} latest signature set already installed Aug 15 03:43:46 root maldet(25080): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 15 03:43:50 root maldet(25080): {scan} signatures loaded: 15550 (12738 MD5 | 2035 HEX | 777 YARA | 0 USER) Aug 15 03:43:50 root maldet(25080): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 15 03:43:50 root maldet(25080): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 15 03:43:50 root maldet(25080): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/a2zinsolvencyser/public_html/" "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/acb/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aetherco/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/akncaskac/public_html/" "/home/almashuqueenterp/public_html/" "/home/alrahman/public_html/" "/home/amazeconsultants/public_html/" "/home/amitrgup/public_html/" "/home/anantsolarenergy/public_html/" "/home/anilayus/public_html/" "/home/anjaliknapsackco/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/antoninconsultan/public_html/" "/home/aoneapparels/public_html/" "/home/apsshank/public_html/" "/home/argafca/public_html/" "/home/arkamediaco/public_html/" "/home/aryavartcraft/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/avsdelhi/public_html/" "/home/bachatmudra/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bjdect/public_html/" "/home/bkr1developersco/public_html/" "/home/bkr2developers/public_html/" "/home/bkrco/public_html/" "/home/bkrdevelopers/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/brandads/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/bunkerphila/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cabmadan/public_html/" "/home/cacmacsclasses/public_html/" "/home/cacpa/public_html/" "/home/cadilipsingh/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/caka/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capspharma/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/cartridgebucket/public_html/" "/home/casagararora/public_html/" "/home/casaini/public_html/" "/home/casanjay/public_html/" "/home/casharma/public_html/" "/home/caslsach/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/cgupta/public_html/" "/home/charliproduction/public_html/" "/home/cleaningfaciliti/public_html/" "/home/companyr/public_html/" "/home/corporatewinedge/public_html/" "/home/cpchambers/public_html/" "/home/creat12345/public_html/" "/home/credence/public_html/" "/home/csakr/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhitax/public_html/" "/home/delhivat/public_html/" "/home/devbuildcon/public_html/" "/home/dhanustankar/public_html/" "/home/digimarkmedia/public_html/" "/home/ditco/public_html/" "/home/divyaima/public_html/" "/home/djrehil/public_html/" "/home/dpacaonl/public_html/" "/home/dscaade/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/eternalsolutions/public_html/" "/home/fiduciaco/public_html/" "/home/fladeal/public_html/" "/home/fundingngo/public_html/" "/home/gargtaxs/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/ghatghatvasi/public_html/" "/home/gowelco/public_html/" "/home/gowelin/public_html/" "/home/gowelnet/public_html/" "/home/gowelorg/public_html/" "/home/gowel/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/grgsmartvehicle/public_html/" "/home/gsandco/public_html/" "/home/gscconsultants/public_html/" "/home/gstaccountants/public_html/" "/home/gstconsultantind/public_html/" "/home/gstdelhiexpert/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/gstregistrationi/public_html/" "/home/gunainternationa/public_html/" "/home/gwalagad/public_html/" "/home/hairmaxc/public_html/" "/home/hansadhwani/public_html/" "/home/harishro/public_html/" "/home/henosis/public_html/" "/home/hindcomputers/public_html/" "/home/homeandlaploans/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ijdre/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/innovati/public_html/" "/home/jankiexim/public_html/" "/home/jata/public_html/" "/home/jknp/public_html/" "/home/jmsandco/public_html/" "/home/jmscost/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/karmaoutsource/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/knaphost/public_html/" "/home/knapsackco/public_html/" "/home/knowyourwater/public_html/" "/home/krishna1/public_html/" "/home/ksrollcr/public_html/" "/home/lacoindi/public_html/" "/home/lasglobe/public_html/" "/home/laxmiaviation/public_html/" "/home/lctrust/public_html/" "/home/loan4hospitals/public_html/" "/home/loantree/public_html/" "/home/mamati/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mehrotraseth/public_html/" "/home/mender/public_html/" "/home/mfngo/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mithilahaat/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/motherfintech/public_html/" "/home/motivato/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkassociatesco/public_html/" "/home/nkjaco/public_html/" "/home/noidataxconsulta/public_html/" "/home/office/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/ospreypanel/public_html/" "/home/pankajinvestment/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/photonplus/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/radankslegalinte/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rashmigoel/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rbcindia/public_html/" "/home/rcgargca/public_html/" "/home/realtorsindia/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/risecons/public_html/" "/home/rjandco/public_html/" "/home/rotoffse/public_html/" "/home/royalmiles/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcassociates/public_html/" "/home/sahyoginstitute/public_html/" "/home/sairamfacility/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sarikaresidency/public_html/" "/home/sbcoindia/public_html/" "/home/sbguptaa/public_html/" "/home/sfjltd/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/smartitconsultan/public_html/" "/home/smsaadi/public_html/" "/home/solutionhut/public_html/" "/home/soulsocietyco/public_html/" "/home/spgtierra/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadar/public_html/" "/home/sriairve/public_html/" "/home/ssahoo/public_html/" "/home/ssandco/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/ssvtaxad/public_html/" "/home/stakrr/public_html/" "/home/stbjsolutions/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/supersec/public_html/" "/home/suryafoundationn/public_html/" "/home/svsmetals/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/talentbizz/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecplabu/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tnyconsulting/public_html/" "/home/tradingandlearni/public_html/" "/home/trstco/public_html/" "/home/trueandfair/public_html/" "/home/tutorsinnoida/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vinayakaenterpri/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/warranty/public_html/" "/home/watchoveryou/public_html/" "/home/wiretwis/public_html/" "/home/worldexpertservi/public_html/" "/home/worldwidedigimar/public_html/" "/home/wwwknapsack/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/zipene/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 15 03:50:33 root maldet(25080): {scan} file list completed in 403s, found 6185 files... Aug 15 03:50:33 root maldet(25080): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 15 03:50:33 root maldet(25080): {scan} scan of (6185 files) in progress... Aug 15 03:51:57 root maldet(25080): {hit} malware hit {YARA}eval_post found for /home/srgtechn/public_html/wp-xml1pc.php Aug 15 03:51:57 root maldet(25080): {quar} malware quarantined from '/home/srgtechn/public_html/wp-xml1pc.php' to '/usr/local/maldetect/quarantine/wp-xml1pc.php.210808159' Aug 15 03:51:57 root maldet(25080): {scan} scan completed on : files 6185, malware hits 1, cleaned hits 0, time 491s Aug 15 03:51:57 root maldet(25080): {scan} scan report saved, to view run: maldet --report 190815-0343.25080 Aug 16 00:34:24 root maldet(25482): {scan} signatures loaded: 15550 (12738 MD5 | 2035 HEX | 777 YARA | 0 USER) Aug 16 00:34:24 root maldet(25482): {scan} building file list for /srgtechn/public_html, this might take awhile... Aug 16 00:34:24 root maldet(25482): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 16 00:34:24 root maldet(25482): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/srgtechn/public_html" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 16 00:34:24 root maldet(25482): {scan} file list completed in 0s, found 13 files... Aug 16 00:34:24 root maldet(25482): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 16 00:34:24 root maldet(25482): {scan} scan of /srgtechn/public_html (13 files) in progress... Aug 16 00:34:24 root maldet(25482): {scan} scan completed on /srgtechn/public_html: files 13, malware hits 0, cleaned hits 0, time 0s Aug 16 00:34:24 root maldet(25482): {scan} scan report saved, to view run: maldet --report 190816-0034.25482 Aug 16 03:32:10 root maldet(13200): {update} checking for available updates... Aug 16 03:32:11 root maldet(13200): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 16 03:32:11 root maldet(13200): {update} hashing install files and checking against server... Aug 16 03:32:11 root maldet(13200): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 16 03:32:11 root maldet(13200): {update} latest version already installed. Aug 16 03:32:11 root maldet(13338): {sigup} performing signature update check... Aug 16 03:32:11 root maldet(13338): {sigup} local signature set is version 2019081323971 Aug 16 03:32:11 root maldet(13338): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 16 03:32:11 root maldet(13338): {sigup} latest signature set already installed Aug 16 03:32:11 root maldet(13454): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 16 03:32:12 root maldet(13454): {scan} signatures loaded: 15550 (12738 MD5 | 2035 HEX | 777 YARA | 0 USER) Oct 01 03:22:58 root maldet(13913): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 01 03:22:58 root maldet(13913): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 01 03:22:58 root maldet(13913): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/cpchambers/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhivat/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fantamsecurities/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/manishajaiswal/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nihhash/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 01 03:23:01 root maldet(13913): {scan} file list completed in 3s, found 9688 files... Oct 01 03:23:01 root maldet(13913): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 01 03:23:01 root maldet(13913): {scan} scan of (9688 files) in progress... Oct 01 03:25:06 root maldet(13913): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/vendor/fontawesome/fonts/.ea03e3b8.ico Oct 01 03:25:06 root maldet(13913): {quar} malware quarantined from '/home/sssminfotech/public_html/vendor/fontawesome/fonts/.ea03e3b8.ico' to '/usr/local/maldetect/quarantine/.ea03e3b8.ico.87588964' Oct 01 03:25:06 root maldet(13913): {scan} scan completed on : files 9688, malware hits 1, cleaned hits 0, time 128s Oct 01 03:25:06 root maldet(13913): {scan} scan report saved, to view run: maldet --report 211001-0322.13913 Oct 02 03:50:52 root maldet(12052): {update} checking for available updates... Oct 02 03:50:53 root maldet(12052): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 02 03:50:53 root maldet(12052): {update} hashing install files and checking against server... Oct 02 03:50:53 root maldet(12052): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 02 03:50:53 root maldet(12052): {update} latest version already installed. Oct 02 03:50:53 root maldet(12187): {sigup} performing signature update check... Oct 02 03:50:53 root maldet(12187): {sigup} local signature set is version 202109282516026 Oct 02 03:50:54 root maldet(12187): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 02 03:50:54 root maldet(12187): {sigup} new signature set 202110013190725 available Oct 02 03:50:54 root maldet(12187): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 02 03:50:55 root maldet(12187): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 02 03:50:55 root maldet(12187): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 02 03:50:55 root maldet(12187): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 02 03:50:56 root maldet(12187): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 02 03:50:56 root maldet(12187): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 02 03:50:56 root maldet(12187): {sigup} verified md5sum of maldet-sigpack.tgz Oct 02 03:50:57 root maldet(12187): {sigup} unpacked and installed maldet-sigpack.tgz Oct 02 03:50:57 root maldet(12187): {sigup} verified md5sum of maldet-clean.tgz Oct 02 03:50:57 root maldet(12187): {sigup} unpacked and installed maldet-clean.tgz Oct 02 03:50:57 root maldet(12187): {sigup} signature set update completed Oct 02 03:50:57 root maldet(12187): {sigup} 17258 signatures (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 02 03:50:57 root maldet(12432): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 02 03:51:10 root maldet(12432): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 02 03:51:10 root maldet(12432): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 02 03:51:10 root maldet(12432): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 02 03:51:10 root maldet(12432): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/cpchambers/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhivat/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fantamsecurities/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/manishajaiswal/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nihhash/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 02 03:51:12 root maldet(12432): {scan} file list completed in 2s, found 6653 files... Oct 02 03:51:12 root maldet(12432): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 02 03:51:12 root maldet(12432): {scan} scan of (6653 files) in progress... Oct 02 03:52:05 root maldet(12432): {scan} scan completed on : files 6653, malware hits 0, cleaned hits 0, time 68s Oct 02 03:52:05 root maldet(12432): {scan} scan report saved, to view run: maldet --report 211002-0350.12432 Oct 03 03:20:52 root maldet(10717): {update} checking for available updates... Oct 03 03:20:53 root maldet(10717): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 03 03:20:53 root maldet(10717): {update} hashing install files and checking against server... Oct 03 03:20:53 root maldet(10717): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 03 03:20:53 root maldet(10717): {update} latest version already installed. Oct 03 03:20:53 root maldet(10861): {sigup} performing signature update check... Oct 03 03:20:53 root maldet(10861): {sigup} local signature set is version 202110013190725 Oct 03 03:20:54 root maldet(10861): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 03 03:20:54 root maldet(10861): {sigup} latest signature set already installed Oct 03 03:20:54 root maldet(10972): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 03 03:20:54 root maldet(10972): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 03 03:20:54 root maldet(10972): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 03 03:20:54 root maldet(10972): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 03 03:20:54 root maldet(10972): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/cpchambers/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhivat/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fantamsecurities/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/manishajaiswal/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nihhash/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 03 03:20:57 root maldet(10972): {scan} file list completed in 3s, found 113 files... Oct 03 03:20:57 root maldet(10972): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 03 03:20:57 root maldet(10972): {scan} scan of (113 files) in progress... Oct 03 03:21:10 root maldet(10972): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/sssm_infotech/vendor/.6e629f13.ico Oct 03 03:21:10 root maldet(10972): {quar} malware quarantined from '/home/sssminfotech/public_html/sssm_infotech/vendor/.6e629f13.ico' to '/usr/local/maldetect/quarantine/.6e629f13.ico.2948916445' Oct 03 03:21:10 root maldet(10972): {scan} scan completed on : files 113, malware hits 1, cleaned hits 0, time 16s Oct 03 03:21:10 root maldet(10972): {scan} scan report saved, to view run: maldet --report 211003-0320.10972 Oct 04 03:41:15 root maldet(17794): {update} checking for available updates... Oct 04 03:41:15 root maldet(17794): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 04 03:41:15 root maldet(17794): {update} hashing install files and checking against server... Oct 04 03:41:16 root maldet(17794): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 04 03:41:16 root maldet(17794): {update} latest version already installed. Oct 04 03:41:16 root maldet(17930): {sigup} performing signature update check... Oct 04 03:41:16 root maldet(17930): {sigup} local signature set is version 202110013190725 Oct 04 03:41:16 root maldet(17930): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 04 03:41:16 root maldet(17930): {sigup} latest signature set already installed Oct 04 03:41:16 root maldet(18041): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 04 03:41:17 root maldet(18041): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 04 03:41:17 root maldet(18041): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 04 03:41:17 root maldet(18041): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 04 03:41:17 root maldet(18041): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/cpchambers/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhivat/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fantamsecurities/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/manishajaiswal/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nihhash/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 04 03:41:24 root maldet(18041): {scan} file list completed in 7s, found 96 files... Oct 04 03:41:24 root maldet(18041): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 04 03:41:24 root maldet(18041): {scan} scan of (96 files) in progress... Oct 04 03:41:35 root maldet(18041): {scan} scan completed on : files 96, malware hits 0, cleaned hits 0, time 19s Oct 04 03:41:35 root maldet(18041): {scan} scan report saved, to view run: maldet --report 211004-0341.18041 Oct 05 03:15:41 root maldet(984): {update} checking for available updates... Oct 05 03:15:41 root maldet(984): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 05 03:15:41 root maldet(984): {update} hashing install files and checking against server... Oct 05 03:15:41 root maldet(984): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 05 03:15:41 root maldet(984): {update} latest version already installed. Oct 05 03:15:41 root maldet(1119): {sigup} performing signature update check... Oct 05 03:15:41 root maldet(1119): {sigup} local signature set is version 202110013190725 Oct 05 03:15:42 root maldet(1119): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 05 03:15:42 root maldet(1119): {sigup} new signature set 202110043879149 available Oct 05 03:15:42 root maldet(1119): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 05 03:15:42 root maldet(1119): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 05 03:15:42 root maldet(1119): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 05 03:15:42 root maldet(1119): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 05 03:15:43 root maldet(1119): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 05 03:15:43 root maldet(1119): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 05 03:15:43 root maldet(1119): {sigup} verified md5sum of maldet-sigpack.tgz Oct 05 03:15:43 root maldet(1119): {sigup} unpacked and installed maldet-sigpack.tgz Oct 05 03:15:43 root maldet(1119): {sigup} verified md5sum of maldet-clean.tgz Oct 05 03:15:43 root maldet(1119): {sigup} unpacked and installed maldet-clean.tgz Oct 05 03:15:43 root maldet(1119): {sigup} signature set update completed Oct 05 03:15:43 root maldet(1119): {sigup} 17258 signatures (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 05 03:15:43 root maldet(1362): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 05 03:15:57 root maldet(1362): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 05 03:15:57 root maldet(1362): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 05 03:15:57 root maldet(1362): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 05 03:15:57 root maldet(1362): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/cpchambers/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhivat/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fantamsecurities/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/manishajaiswal/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nihhash/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 05 03:15:59 root maldet(1362): {scan} file list completed in 2s, found 378 files... Oct 05 03:15:59 root maldet(1362): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 05 03:15:59 root maldet(1362): {scan} scan of (378 files) in progress... Oct 05 03:16:19 root maldet(1362): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/sssm_infotech/vendor/fonts/.a24a3f09.ico Oct 05 03:16:19 root maldet(1362): {quar} malware quarantined from '/home/sssminfotech/public_html/sssm_infotech/vendor/fonts/.a24a3f09.ico' to '/usr/local/maldetect/quarantine/.a24a3f09.ico.154265495' Oct 05 03:16:20 root maldet(1362): {scan} scan completed on : files 378, malware hits 1, cleaned hits 0, time 37s Oct 05 03:16:20 root maldet(1362): {scan} scan report saved, to view run: maldet --report 211005-0315.1362 Oct 06 03:29:41 root maldet(29433): {update} checking for available updates... Oct 06 03:29:41 root maldet(29433): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 06 03:29:41 root maldet(29433): {update} hashing install files and checking against server... Oct 06 03:29:42 root maldet(29433): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 06 03:29:42 root maldet(29433): {update} latest version already installed. Oct 06 03:29:42 root maldet(29570): {sigup} performing signature update check... Oct 06 03:29:42 root maldet(29570): {sigup} local signature set is version 202110043879149 Oct 06 03:29:42 root maldet(29570): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 06 03:29:42 root maldet(29570): {sigup} latest signature set already installed Oct 06 03:29:42 root maldet(29683): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 06 03:29:43 root maldet(29683): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 06 03:29:43 root maldet(29683): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 06 03:29:43 root maldet(29683): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 06 03:29:43 root maldet(29683): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/cpchambers/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhivat/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fantamsecurities/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/manishajaiswal/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nihhash/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 06 03:41:08 root maldet(29683): {scan} file list completed in 685s, found 298 files... Oct 06 03:41:08 root maldet(29683): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 06 03:41:08 root maldet(29683): {scan} scan of (298 files) in progress... Oct 06 03:41:59 root maldet(29683): {scan} scan completed on : files 298, malware hits 0, cleaned hits 0, time 737s Oct 06 03:41:59 root maldet(29683): {scan} scan report saved, to view run: maldet --report 211006-0329.29683 Oct 07 03:19:32 root maldet(22409): {update} checking for available updates... Oct 07 03:19:32 root maldet(22409): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 07 03:19:32 root maldet(22409): {update} hashing install files and checking against server... Oct 07 03:19:33 root maldet(22409): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 07 03:19:33 root maldet(22409): {update} latest version already installed. Oct 07 03:19:33 root maldet(22546): {sigup} performing signature update check... Oct 07 03:19:33 root maldet(22546): {sigup} local signature set is version 202110043879149 Oct 07 03:19:33 root maldet(22546): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 07 03:19:33 root maldet(22546): {sigup} latest signature set already installed Oct 07 03:19:33 root maldet(22660): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 07 03:19:34 root maldet(22660): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 07 03:19:34 root maldet(22660): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 07 03:19:34 root maldet(22660): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 07 03:19:34 root maldet(22660): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/cpchambers/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhivat/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fantamsecurities/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/manishajaiswal/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nihhash/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 07 03:19:36 root maldet(22660): {scan} file list completed in 2s, found 141 files... Oct 07 03:19:36 root maldet(22660): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 07 03:19:36 root maldet(22660): {scan} scan of (141 files) in progress... Oct 07 03:19:46 root maldet(22660): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/sssm_infotech/vendor/rs-plugin/.e4f7d01d.ico Oct 07 03:19:46 root maldet(22660): {quar} malware quarantined from '/home/sssminfotech/public_html/sssm_infotech/vendor/rs-plugin/.e4f7d01d.ico' to '/usr/local/maldetect/quarantine/.e4f7d01d.ico.3172422979' Oct 07 03:19:46 root maldet(22660): {scan} scan completed on : files 141, malware hits 1, cleaned hits 0, time 13s Oct 07 03:19:46 root maldet(22660): {scan} scan report saved, to view run: maldet --report 211007-0319.22660 Oct 08 03:39:48 root maldet(8264): {update} checking for available updates... Oct 08 03:39:48 root maldet(8264): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 08 03:39:48 root maldet(8264): {update} hashing install files and checking against server... Oct 08 03:39:49 root maldet(8264): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 08 03:39:49 root maldet(8264): {update} latest version already installed. Oct 08 03:39:49 root maldet(8404): {sigup} performing signature update check... Oct 08 03:39:49 root maldet(8404): {sigup} local signature set is version 202110043879149 Oct 08 03:39:49 root maldet(8404): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 08 03:39:49 root maldet(8404): {sigup} new signature set 20211007359953 available Oct 08 03:39:49 root maldet(8404): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 08 03:39:49 root maldet(8404): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 08 03:39:50 root maldet(8404): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 08 03:39:50 root maldet(8404): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 08 03:39:50 root maldet(8404): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 08 03:39:50 root maldet(8404): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 08 03:39:50 root maldet(8404): {sigup} verified md5sum of maldet-sigpack.tgz Oct 08 03:39:50 root maldet(8404): {sigup} unpacked and installed maldet-sigpack.tgz Oct 08 03:39:50 root maldet(8404): {sigup} verified md5sum of maldet-clean.tgz Oct 08 03:39:50 root maldet(8404): {sigup} unpacked and installed maldet-clean.tgz Oct 08 03:39:50 root maldet(8404): {sigup} signature set update completed Oct 08 03:39:50 root maldet(8404): {sigup} 17258 signatures (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 08 03:39:50 root maldet(8644): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 08 03:40:04 root maldet(8644): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 08 03:40:04 root maldet(8644): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 08 03:40:04 root maldet(8644): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 08 03:40:04 root maldet(8644): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/cpchambers/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhivat/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fantamsecurities/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/manishajaiswal/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nihhash/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 08 03:40:06 root maldet(8644): {scan} file list completed in 2s, found 12611 files... Oct 08 03:40:06 root maldet(8644): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 08 03:40:06 root maldet(8644): {scan} scan of (12611 files) in progress... Oct 08 03:41:01 root maldet(8644): {scan} scan completed on : files 12611, malware hits 0, cleaned hits 0, time 71s Oct 08 03:41:01 root maldet(8644): {scan} scan report saved, to view run: maldet --report 211008-0339.8644 Oct 09 03:43:03 root maldet(18062): {update} checking for available updates... Oct 09 03:43:03 root maldet(18062): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 09 03:43:03 root maldet(18062): {update} hashing install files and checking against server... Oct 09 03:43:03 root maldet(18062): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 09 03:43:03 root maldet(18062): {update} latest version already installed. Oct 09 03:43:03 root maldet(18196): {sigup} performing signature update check... Oct 09 03:43:03 root maldet(18196): {sigup} local signature set is version 20211007359953 Oct 09 03:43:04 root maldet(18196): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 09 03:43:04 root maldet(18196): {sigup} latest signature set already installed Oct 09 03:43:04 root maldet(18309): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 09 03:43:04 root maldet(18309): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 09 03:43:04 root maldet(18309): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 09 03:43:04 root maldet(18309): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 09 03:43:04 root maldet(18309): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/cpchambers/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhivat/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fantamsecurities/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/manishajaiswal/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nihhash/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 09 03:43:07 root maldet(18309): {scan} file list completed in 3s, found 120 files... Oct 09 03:43:07 root maldet(18309): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 09 03:43:07 root maldet(18309): {scan} scan of (120 files) in progress... Oct 09 03:43:16 root maldet(18309): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/sssm_infotech/img/.318628de.ico Oct 09 03:43:16 root maldet(18309): {quar} malware quarantined from '/home/sssminfotech/public_html/sssm_infotech/img/.318628de.ico' to '/usr/local/maldetect/quarantine/.318628de.ico.2528019181' Oct 09 03:43:16 root maldet(18309): {scan} scan completed on : files 120, malware hits 1, cleaned hits 0, time 12s Oct 09 03:43:16 root maldet(18309): {scan} scan report saved, to view run: maldet --report 211009-0343.18309 Oct 10 03:46:55 root maldet(30352): {update} checking for available updates... Oct 10 03:46:56 root maldet(30352): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 10 03:46:56 root maldet(30352): {update} hashing install files and checking against server... Oct 10 03:46:56 root maldet(30352): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 10 03:46:56 root maldet(30352): {update} latest version already installed. Oct 10 03:46:56 root maldet(30499): {sigup} performing signature update check... Oct 10 03:46:56 root maldet(30499): {sigup} local signature set is version 20211007359953 Oct 10 03:46:56 root maldet(30499): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 10 03:46:56 root maldet(30499): {sigup} latest signature set already installed Oct 10 03:46:57 root maldet(30611): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 10 03:46:57 root maldet(30611): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 10 03:46:57 root maldet(30611): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 10 03:46:57 root maldet(30611): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 10 03:46:57 root maldet(30611): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/cpchambers/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhivat/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fantamsecurities/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/manishajaiswal/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nihhash/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 10 03:46:59 root maldet(30611): {scan} file list completed in 2s, found 213 files... Oct 10 03:46:59 root maldet(30611): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 10 03:46:59 root maldet(30611): {scan} scan of (213 files) in progress... Oct 10 03:47:11 root maldet(30611): {scan} scan completed on : files 213, malware hits 0, cleaned hits 0, time 14s Oct 10 03:47:11 root maldet(30611): {scan} scan report saved, to view run: maldet --report 211010-0346.30611 Oct 11 03:53:14 root maldet(26827): {update} checking for available updates... Oct 11 03:53:14 root maldet(26827): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 11 03:53:14 root maldet(26827): {update} hashing install files and checking against server... Oct 11 03:53:14 root maldet(26827): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 11 03:53:14 root maldet(26827): {update} latest version already installed. Oct 11 03:53:14 root maldet(26962): {sigup} performing signature update check... Oct 11 03:53:14 root maldet(26962): {sigup} local signature set is version 20211007359953 Oct 11 03:53:14 root maldet(26962): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 11 03:53:14 root maldet(26962): {sigup} new signature set 202110101033989 available Oct 11 03:53:14 root maldet(26962): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 11 03:53:15 root maldet(26962): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 11 03:53:15 root maldet(26962): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 11 03:53:15 root maldet(26962): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 11 03:53:15 root maldet(26962): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 11 03:53:15 root maldet(26962): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 11 03:53:15 root maldet(26962): {sigup} verified md5sum of maldet-sigpack.tgz Oct 11 03:53:16 root maldet(26962): {sigup} unpacked and installed maldet-sigpack.tgz Oct 11 03:53:16 root maldet(26962): {sigup} verified md5sum of maldet-clean.tgz Oct 11 03:53:16 root maldet(26962): {sigup} unpacked and installed maldet-clean.tgz Oct 11 03:53:16 root maldet(26962): {sigup} signature set update completed Oct 11 03:53:16 root maldet(26962): {sigup} 17258 signatures (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 11 03:53:16 root maldet(27198): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 11 03:53:30 root maldet(27198): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 11 03:53:30 root maldet(27198): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 11 03:53:30 root maldet(27198): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 11 03:53:30 root maldet(27198): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/cpchambers/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhivat/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fantamsecurities/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/manishajaiswal/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nihhash/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 11 03:53:32 root maldet(27198): {scan} file list completed in 2s, found 128 files... Oct 11 03:53:32 root maldet(27198): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 11 03:53:32 root maldet(27198): {scan} scan of (128 files) in progress... Oct 11 03:53:49 root maldet(27198): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/vendor/bootstrap/.1ee63515.ico Oct 11 03:53:49 root maldet(27198): {quar} malware quarantined from '/home/sssminfotech/public_html/vendor/bootstrap/.1ee63515.ico' to '/usr/local/maldetect/quarantine/.1ee63515.ico.3122615837' Oct 11 03:53:49 root maldet(27198): {scan} scan completed on : files 128, malware hits 1, cleaned hits 0, time 33s Oct 11 03:53:50 root maldet(27198): {scan} scan report saved, to view run: maldet --report 211011-0353.27198 Oct 12 03:39:35 root maldet(17280): {update} checking for available updates... Oct 12 03:39:36 root maldet(17280): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 12 03:39:36 root maldet(17280): {update} hashing install files and checking against server... Oct 12 03:39:36 root maldet(17280): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 12 03:39:36 root maldet(17280): {update} latest version already installed. Oct 12 03:39:36 root maldet(17423): {sigup} performing signature update check... Oct 12 03:39:36 root maldet(17423): {sigup} local signature set is version 202110101033989 Oct 12 03:39:36 root maldet(17423): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 12 03:39:36 root maldet(17423): {sigup} latest signature set already installed Oct 12 03:39:37 root maldet(17570): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 12 03:39:37 root maldet(17570): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 12 03:39:37 root maldet(17570): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 12 03:39:37 root maldet(17570): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 12 03:39:37 root maldet(17570): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/cpchambers/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhivat/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fantamsecurities/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/manishajaiswal/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nihhash/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 12 03:39:39 root maldet(17570): {scan} file list completed in 2s, found 118 files... Oct 12 03:39:39 root maldet(17570): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 12 03:39:39 root maldet(17570): {scan} scan of (118 files) in progress... Oct 12 03:39:50 root maldet(17570): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/vendor/fontawesome/fonts/.b57e47c3.ico Oct 12 03:39:50 root maldet(17570): {quar} malware quarantined from '/home/sssminfotech/public_html/vendor/fontawesome/fonts/.b57e47c3.ico' to '/usr/local/maldetect/quarantine/.b57e47c3.ico.3135116346' Oct 12 03:39:50 root maldet(17570): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/img/slides/.7e62c36e.ico Oct 12 03:39:50 root maldet(17570): {quar} malware quarantined from '/home/sssminfotech/public_html/img/slides/.7e62c36e.ico' to '/usr/local/maldetect/quarantine/.7e62c36e.ico.1437625674' Oct 12 03:39:50 root maldet(17570): {scan} scan completed on : files 118, malware hits 2, cleaned hits 0, time 13s Oct 12 03:39:50 root maldet(17570): {scan} scan report saved, to view run: maldet --report 211012-0339.17570 Oct 13 03:45:31 root maldet(3456): {update} checking for available updates... Oct 13 03:45:31 root maldet(3456): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 13 03:45:31 root maldet(3456): {update} hashing install files and checking against server... Oct 13 03:45:31 root maldet(3456): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 13 03:45:31 root maldet(3456): {update} latest version already installed. Oct 13 03:45:31 root maldet(3592): {sigup} performing signature update check... Oct 13 03:45:31 root maldet(3592): {sigup} local signature set is version 202110101033989 Oct 13 03:45:32 root maldet(3592): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 13 03:45:32 root maldet(3592): {sigup} latest signature set already installed Oct 13 03:45:32 root maldet(3704): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 13 03:45:32 root maldet(3704): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 13 03:45:32 root maldet(3704): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 13 03:45:32 root maldet(3704): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 13 03:45:32 root maldet(3704): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/cpchambers/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhivat/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fantamsecurities/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/manishajaiswal/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nihhash/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 13 03:45:34 root maldet(3704): {scan} file list completed in 2s, found 127 files... Oct 13 03:45:34 root maldet(3704): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 13 03:45:34 root maldet(3704): {scan} scan of (127 files) in progress... Oct 13 03:45:44 root maldet(3704): {scan} scan completed on : files 127, malware hits 0, cleaned hits 0, time 12s Oct 13 03:45:44 root maldet(3704): {scan} scan report saved, to view run: maldet --report 211013-0345.3704 Oct 14 03:11:26 root maldet(12711): {update} checking for available updates... Oct 14 03:11:27 root maldet(12711): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 14 03:11:27 root maldet(12711): {update} hashing install files and checking against server... Oct 14 03:11:27 root maldet(12711): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 14 03:11:27 root maldet(12711): {update} latest version already installed. Oct 14 03:11:27 root maldet(12856): {sigup} performing signature update check... Oct 14 03:11:27 root maldet(12856): {sigup} local signature set is version 202110101033989 Oct 14 03:11:27 root maldet(12856): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 14 03:11:27 root maldet(12856): {sigup} new signature set 202110131708808 available Oct 14 03:11:27 root maldet(12856): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 14 03:11:28 root maldet(12856): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 14 03:11:28 root maldet(12856): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 14 03:11:28 root maldet(12856): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 14 03:11:28 root maldet(12856): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 14 03:11:28 root maldet(12856): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 14 03:11:28 root maldet(12856): {sigup} verified md5sum of maldet-sigpack.tgz Oct 14 03:11:29 root maldet(12856): {sigup} unpacked and installed maldet-sigpack.tgz Oct 14 03:11:29 root maldet(12856): {sigup} verified md5sum of maldet-clean.tgz Oct 14 03:11:29 root maldet(12856): {sigup} unpacked and installed maldet-clean.tgz Oct 14 03:11:29 root maldet(12856): {sigup} signature set update completed Oct 14 03:11:29 root maldet(12856): {sigup} 17258 signatures (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 14 03:11:29 root maldet(13096): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 14 03:11:42 root maldet(13096): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 14 03:11:42 root maldet(13096): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 14 03:11:42 root maldet(13096): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 14 03:11:42 root maldet(13096): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/cpchambers/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhivat/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fantamsecurities/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/manishajaiswal/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nihhash/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 14 03:11:44 root maldet(13096): {scan} file list completed in 2s, found 8208 files... Oct 14 03:11:44 root maldet(13096): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 14 03:11:44 root maldet(13096): {scan} scan of (8208 files) in progress... Oct 14 03:12:42 root maldet(13096): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/Download/.38c87b85.ico Oct 14 03:12:42 root maldet(13096): {quar} malware quarantined from '/home/sssminfotech/public_html/Download/.38c87b85.ico' to '/usr/local/maldetect/quarantine/.38c87b85.ico.268767649' Oct 14 03:12:42 root maldet(13096): {scan} scan completed on : files 8208, malware hits 1, cleaned hits 0, time 73s Oct 14 03:12:42 root maldet(13096): {scan} scan report saved, to view run: maldet --report 211014-0311.13096 Oct 15 03:49:50 root maldet(1145): {update} checking for available updates... Oct 15 03:49:50 root maldet(1145): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 15 03:49:50 root maldet(1145): {update} hashing install files and checking against server... Oct 15 03:49:50 root maldet(1145): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 15 03:49:50 root maldet(1145): {update} latest version already installed. Oct 15 03:49:50 root maldet(1278): {sigup} performing signature update check... Oct 15 03:49:50 root maldet(1278): {sigup} local signature set is version 202110131708808 Oct 15 03:49:51 root maldet(1278): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 15 03:49:51 root maldet(1278): {sigup} latest signature set already installed Oct 15 03:49:51 root maldet(1389): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 15 03:49:51 root maldet(1389): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 15 03:49:51 root maldet(1389): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 15 03:49:51 root maldet(1389): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 15 03:49:51 root maldet(1389): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/cpchambers/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhivat/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fantamsecurities/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/manishajaiswal/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nihhash/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 15 03:49:53 root maldet(1389): {scan} file list completed in 2s, found 6283 files... Oct 15 03:49:53 root maldet(1389): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 15 03:49:53 root maldet(1389): {scan} scan of (6283 files) in progress... Oct 15 03:50:25 root maldet(1389): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/img/logos/.3484c7c1.ico Oct 15 03:50:25 root maldet(1389): {quar} malware quarantined from '/home/sssminfotech/public_html/img/logos/.3484c7c1.ico' to '/usr/local/maldetect/quarantine/.3484c7c1.ico.193562969' Oct 15 03:50:25 root maldet(1389): {scan} scan completed on : files 6283, malware hits 1, cleaned hits 0, time 34s Oct 15 03:50:25 root maldet(1389): {scan} scan report saved, to view run: maldet --report 211015-0349.1389 Oct 16 03:34:24 root maldet(32764): {update} checking for available updates... Oct 16 03:34:25 root maldet(32764): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 16 03:34:25 root maldet(32764): {update} hashing install files and checking against server... Oct 16 03:34:25 root maldet(32764): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 16 03:34:25 root maldet(32764): {update} latest version already installed. Oct 16 03:34:25 root maldet(464): {sigup} performing signature update check... Oct 16 03:34:25 root maldet(464): {sigup} local signature set is version 202110131708808 Oct 16 03:34:25 root maldet(464): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 16 03:34:25 root maldet(464): {sigup} latest signature set already installed Oct 16 03:34:25 root maldet(579): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 16 03:34:26 root maldet(579): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 16 03:34:26 root maldet(579): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 16 03:34:26 root maldet(579): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 16 03:34:26 root maldet(579): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/cpchambers/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhivat/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fantamsecurities/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/manishajaiswal/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nihhash/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 16 03:34:28 root maldet(579): {scan} file list completed in 2s, found 217 files... Oct 16 03:34:28 root maldet(579): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 16 03:34:28 root maldet(579): {scan} scan of (217 files) in progress... Oct 16 03:34:39 root maldet(579): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/img/sssm/.b75aedf2.ico Oct 16 03:34:39 root maldet(579): {quar} malware quarantined from '/home/sssminfotech/public_html/img/sssm/.b75aedf2.ico' to '/usr/local/maldetect/quarantine/.b75aedf2.ico.1427619292' Oct 16 03:34:39 root maldet(579): {scan} scan completed on : files 217, malware hits 1, cleaned hits 0, time 14s Oct 16 03:34:39 root maldet(579): {scan} scan report saved, to view run: maldet --report 211016-0334.579 Oct 17 03:32:33 root maldet(32764): {update} checking for available updates... Oct 17 03:32:33 root maldet(32764): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 17 03:32:33 root maldet(32764): {update} hashing install files and checking against server... Oct 17 03:32:34 root maldet(32764): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 17 03:32:34 root maldet(32764): {update} latest version already installed. Oct 17 03:32:34 root maldet(466): {sigup} performing signature update check... Oct 17 03:32:34 root maldet(466): {sigup} local signature set is version 202110131708808 Oct 17 03:32:34 root maldet(466): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 17 03:32:34 root maldet(466): {sigup} new signature set 202110162383422 available Oct 17 03:32:34 root maldet(466): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 17 03:32:34 root maldet(466): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 17 03:32:35 root maldet(466): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 17 03:32:35 root maldet(466): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 17 03:32:35 root maldet(466): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 17 03:32:35 root maldet(466): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 17 03:32:35 root maldet(466): {sigup} verified md5sum of maldet-sigpack.tgz Oct 17 03:32:35 root maldet(466): {sigup} unpacked and installed maldet-sigpack.tgz Oct 17 03:32:35 root maldet(466): {sigup} verified md5sum of maldet-clean.tgz Oct 17 03:32:35 root maldet(466): {sigup} unpacked and installed maldet-clean.tgz Oct 17 03:32:35 root maldet(466): {sigup} signature set update completed Oct 17 03:32:35 root maldet(466): {sigup} 17258 signatures (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 17 03:32:36 root maldet(871): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 17 03:32:48 root maldet(871): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 17 03:32:48 root maldet(871): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 17 03:32:48 root maldet(871): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 17 03:32:48 root maldet(871): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/cpchambers/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhivat/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fantamsecurities/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/manishajaiswal/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nihhash/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 17 03:32:51 root maldet(871): {scan} file list completed in 3s, found 140 files... Oct 17 03:32:51 root maldet(871): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 17 03:32:51 root maldet(871): {scan} scan of (140 files) in progress... Oct 17 03:33:12 root maldet(871): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/7ai8xa/cache/.eff5a528.ico Oct 17 03:33:12 root maldet(871): {quar} malware quarantined from '/home/sssminfotech/public_html/7ai8xa/cache/.eff5a528.ico' to '/usr/local/maldetect/quarantine/.eff5a528.ico.2003823189' Oct 17 03:33:12 root maldet(871): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/sssm_infotech/img/logos/.f6afdaee.ico Oct 17 03:33:12 root maldet(871): {quar} malware quarantined from '/home/sssminfotech/public_html/sssm_infotech/img/logos/.f6afdaee.ico' to '/usr/local/maldetect/quarantine/.f6afdaee.ico.2924216024' Oct 17 03:33:12 root maldet(871): {scan} scan completed on : files 140, malware hits 2, cleaned hits 0, time 36s Oct 17 03:33:12 root maldet(871): {scan} scan report saved, to view run: maldet --report 211017-0332.871 Oct 18 03:59:51 root maldet(19210): {update} checking for available updates... Oct 18 03:59:52 root maldet(19210): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 18 03:59:52 root maldet(19210): {update} hashing install files and checking against server... Oct 18 03:59:52 root maldet(19210): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 18 03:59:52 root maldet(19210): {update} latest version already installed. Oct 18 03:59:52 root maldet(19352): {sigup} performing signature update check... Oct 18 03:59:52 root maldet(19352): {sigup} local signature set is version 202110162383422 Oct 18 03:59:52 root maldet(19352): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 18 03:59:52 root maldet(19352): {sigup} latest signature set already installed Oct 18 03:59:53 root maldet(19472): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 18 03:59:53 root maldet(19472): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 18 03:59:53 root maldet(19472): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 18 03:59:53 root maldet(19472): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 18 03:59:53 root maldet(19472): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/cpchambers/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhivat/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fantamsecurities/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/manishajaiswal/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nihhash/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 18 03:59:55 root maldet(19472): {scan} file list completed in 2s, found 822 files... Oct 18 03:59:55 root maldet(19472): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 18 03:59:55 root maldet(19472): {scan} scan of (822 files) in progress... Oct 18 04:00:14 root maldet(19472): {scan} scan completed on : files 822, malware hits 0, cleaned hits 0, time 21s Oct 18 04:00:14 root maldet(19472): {scan} scan report saved, to view run: maldet --report 211018-0359.19472 Oct 19 03:17:27 root maldet(18513): {update} checking for available updates... Oct 19 03:17:28 root maldet(18513): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 19 03:17:28 root maldet(18513): {update} hashing install files and checking against server... Oct 19 03:17:28 root maldet(18513): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 19 03:17:28 root maldet(18513): {update} latest version already installed. Oct 19 03:17:28 root maldet(18647): {sigup} performing signature update check... Oct 19 03:17:28 root maldet(18647): {sigup} local signature set is version 202110162383422 Oct 19 03:17:28 root maldet(18647): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 19 03:17:28 root maldet(18647): {sigup} latest signature set already installed Oct 19 03:17:29 root maldet(18758): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 19 03:17:29 root maldet(18758): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 19 03:17:29 root maldet(18758): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 19 03:17:29 root maldet(18758): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 19 03:17:29 root maldet(18758): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/cpchambers/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhivat/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fantamsecurities/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/manishajaiswal/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nihhash/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 19 03:17:31 root maldet(18758): {scan} file list completed in 2s, found 232 files... Oct 19 03:17:31 root maldet(18758): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 19 03:17:31 root maldet(18758): {scan} scan of (232 files) in progress... Oct 19 03:17:49 root maldet(18758): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/sssm_infotech/.677a044e.ico Oct 19 03:17:49 root maldet(18758): {quar} malware quarantined from '/home/sssminfotech/public_html/sssm_infotech/.677a044e.ico' to '/usr/local/maldetect/quarantine/.677a044e.ico.1332725573' Oct 19 03:17:49 root maldet(18758): {scan} scan completed on : files 232, malware hits 1, cleaned hits 0, time 20s Oct 19 03:17:49 root maldet(18758): {scan} scan report saved, to view run: maldet --report 211019-0317.18758 Oct 20 03:26:02 root maldet(25073): {update} checking for available updates... Oct 20 03:26:02 root maldet(25073): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 20 03:26:02 root maldet(25073): {update} hashing install files and checking against server... Oct 20 03:26:02 root maldet(25073): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 20 03:26:02 root maldet(25073): {update} latest version already installed. Oct 20 03:26:03 root maldet(25206): {sigup} performing signature update check... Oct 20 03:26:03 root maldet(25206): {sigup} local signature set is version 202110162383422 Oct 20 03:26:03 root maldet(25206): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 20 03:26:03 root maldet(25206): {sigup} new signature set 202110193057414 available Oct 20 03:26:03 root maldet(25206): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 20 03:26:03 root maldet(25206): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 20 03:26:04 root maldet(25206): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 20 03:26:04 root maldet(25206): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 20 03:26:04 root maldet(25206): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 20 03:26:04 root maldet(25206): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 20 03:26:04 root maldet(25206): {sigup} verified md5sum of maldet-sigpack.tgz Oct 20 03:26:04 root maldet(25206): {sigup} unpacked and installed maldet-sigpack.tgz Oct 20 03:26:04 root maldet(25206): {sigup} verified md5sum of maldet-clean.tgz Oct 20 03:26:04 root maldet(25206): {sigup} unpacked and installed maldet-clean.tgz Oct 20 03:26:05 root maldet(25206): {sigup} signature set update completed Oct 20 03:26:05 root maldet(25206): {sigup} 17258 signatures (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 20 03:26:05 root maldet(25450): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 20 03:26:17 root maldet(25450): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 20 03:26:17 root maldet(25450): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 20 03:26:17 root maldet(25450): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 20 03:26:17 root maldet(25450): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/cpchambers/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhivat/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fantamsecurities/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/manishajaiswal/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nihhash/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 20 03:26:20 root maldet(25450): {scan} file list completed in 3s, found 249 files... Oct 20 03:26:20 root maldet(25450): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 20 03:26:20 root maldet(25450): {scan} scan of (249 files) in progress... Oct 20 03:26:45 root maldet(25450): {scan} scan completed on : files 249, malware hits 0, cleaned hits 0, time 40s Oct 20 03:26:45 root maldet(25450): {scan} scan report saved, to view run: maldet --report 211020-0326.25450 Oct 21 03:34:47 root maldet(11056): {update} checking for available updates... Oct 21 03:34:47 root maldet(11056): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 21 03:34:47 root maldet(11056): {update} hashing install files and checking against server... Oct 21 03:34:47 root maldet(11056): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 21 03:34:47 root maldet(11056): {update} latest version already installed. Oct 21 03:34:47 root maldet(11190): {sigup} performing signature update check... Oct 21 03:34:47 root maldet(11190): {sigup} local signature set is version 202110193057414 Oct 21 03:34:48 root maldet(11190): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 21 03:34:48 root maldet(11190): {sigup} latest signature set already installed Oct 21 03:34:48 root maldet(11302): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 21 03:34:48 root maldet(11302): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 21 03:34:48 root maldet(11302): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 21 03:34:48 root maldet(11302): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 21 03:34:48 root maldet(11302): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/cpchambers/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhivat/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fantamsecurities/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/manishajaiswal/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nihhash/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 21 03:34:50 root maldet(11302): {scan} file list completed in 2s, found 139 files... Oct 21 03:34:50 root maldet(11302): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 21 03:34:51 root maldet(11302): {scan} scan of (139 files) in progress... Oct 21 03:34:51 root maldet(11302): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/sssm_infotech/css/.31f803ea.ico Oct 21 03:34:51 root maldet(11302): {quar} malware quarantined from '/home/sssminfotech/public_html/sssm_infotech/css/.31f803ea.ico' to '/usr/local/maldetect/quarantine/.31f803ea.ico.2831612624' Oct 21 03:34:51 root maldet(11302): {scan} scan completed on : files 139, malware hits 1, cleaned hits 0, time 3s Oct 21 03:34:51 root maldet(11302): {scan} scan report saved, to view run: maldet --report 211021-0334.11302 Oct 22 03:42:27 root maldet(9157): {update} checking for available updates... Oct 22 03:42:28 root maldet(9157): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 22 03:42:28 root maldet(9157): {update} hashing install files and checking against server... Oct 22 03:42:28 root maldet(9157): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 22 03:42:28 root maldet(9157): {update} latest version already installed. Oct 22 03:42:28 root maldet(9294): {sigup} performing signature update check... Oct 22 03:42:28 root maldet(9294): {sigup} local signature set is version 202110193057414 Oct 22 03:42:29 root maldet(9294): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 22 03:42:29 root maldet(9294): {sigup} latest signature set already installed Oct 22 03:42:29 root maldet(9414): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 22 03:42:29 root maldet(9414): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 22 03:42:29 root maldet(9414): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 22 03:42:29 root maldet(9414): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 22 03:42:29 root maldet(9414): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/cpchambers/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhivat/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fantamsecurities/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/manishajaiswal/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nihhash/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 22 03:42:32 root maldet(9414): {scan} file list completed in 3s, found 813 files... Oct 22 03:42:32 root maldet(9414): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 22 03:42:32 root maldet(9414): {scan} scan of (813 files) in progress... Oct 22 03:43:00 root maldet(9414): {scan} scan completed on : files 813, malware hits 0, cleaned hits 0, time 31s Oct 22 03:43:00 root maldet(9414): {scan} scan report saved, to view run: maldet --report 211022-0342.9414 Oct 23 03:43:20 root maldet(10599): {update} checking for available updates... Oct 23 03:43:20 root maldet(10599): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 23 03:43:20 root maldet(10599): {update} hashing install files and checking against server... Oct 23 03:43:20 root maldet(10599): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 23 03:43:20 root maldet(10599): {update} latest version already installed. Oct 23 03:43:21 root maldet(10736): {sigup} performing signature update check... Oct 23 03:43:21 root maldet(10736): {sigup} local signature set is version 202110193057414 Oct 23 03:43:21 root maldet(10736): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 23 03:43:21 root maldet(10736): {sigup} new signature set 202110223732538 available Oct 23 03:43:21 root maldet(10736): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 23 03:43:21 root maldet(10736): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 23 03:43:22 root maldet(10736): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 23 03:43:22 root maldet(10736): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 23 03:43:22 root maldet(10736): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 23 03:43:22 root maldet(10736): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 23 03:43:22 root maldet(10736): {sigup} verified md5sum of maldet-sigpack.tgz Oct 23 03:43:22 root maldet(10736): {sigup} unpacked and installed maldet-sigpack.tgz Oct 23 03:43:22 root maldet(10736): {sigup} verified md5sum of maldet-clean.tgz Oct 23 03:43:22 root maldet(10736): {sigup} unpacked and installed maldet-clean.tgz Oct 23 03:43:22 root maldet(10736): {sigup} signature set update completed Oct 23 03:43:22 root maldet(10736): {sigup} 17258 signatures (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 23 03:43:22 root maldet(10982): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 23 03:43:36 root maldet(10982): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 23 03:43:36 root maldet(10982): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 23 03:43:36 root maldet(10982): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 23 03:43:36 root maldet(10982): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/cpchambers/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhivat/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fantamsecurities/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/manishajaiswal/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nihhash/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 23 03:43:38 root maldet(10982): {scan} file list completed in 2s, found 6189 files... Oct 23 03:43:38 root maldet(10982): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 23 03:43:38 root maldet(10982): {scan} scan of (6189 files) in progress... Oct 23 03:44:23 root maldet(10982): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/sssm_infotech/vendor/bootstrap/.0b91112f.ico Oct 23 03:44:23 root maldet(10982): {quar} malware quarantined from '/home/sssminfotech/public_html/sssm_infotech/vendor/bootstrap/.0b91112f.ico' to '/usr/local/maldetect/quarantine/.0b91112f.ico.721577' Oct 23 03:44:23 root maldet(10982): {scan} scan completed on : files 6189, malware hits 1, cleaned hits 0, time 61s Oct 23 03:44:23 root maldet(10982): {scan} scan report saved, to view run: maldet --report 211023-0343.10982 Oct 24 03:31:44 root maldet(23402): {update} checking for available updates... Oct 24 03:31:45 root maldet(23402): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 24 03:31:45 root maldet(23402): {update} hashing install files and checking against server... Oct 24 03:31:45 root maldet(23402): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 24 03:31:45 root maldet(23402): {update} latest version already installed. Oct 24 03:31:45 root maldet(23538): {sigup} performing signature update check... Oct 24 03:31:45 root maldet(23538): {sigup} local signature set is version 202110223732538 Oct 24 03:31:45 root maldet(23538): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 24 03:31:45 root maldet(23538): {sigup} latest signature set already installed Oct 24 03:31:46 root maldet(23650): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 24 03:31:46 root maldet(23650): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 24 03:31:46 root maldet(23650): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 24 03:31:46 root maldet(23650): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 24 03:31:46 root maldet(23650): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/cpchambers/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhivat/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fantamsecurities/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/manishajaiswal/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nihhash/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 24 03:31:49 root maldet(23650): {scan} file list completed in 2s, found 23577 files... Oct 24 03:31:49 root maldet(23650): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 24 03:31:49 root maldet(23650): {scan} scan of (23577 files) in progress... Oct 24 03:36:31 root maldet(23650): {hit} malware hit {YARA}webshell_webshell_cnseay02_1 found for /home/hewaindia/public_html/wp-booking.php Oct 24 03:36:31 root maldet(23650): {quar} malware quarantined from '/home/hewaindia/public_html/wp-booking.php' to '/usr/local/maldetect/quarantine/wp-booking.php.2099521895' Oct 24 03:36:31 root maldet(23650): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/sssm_infotech/css/skins/.683c9e91.ico Oct 24 03:36:31 root maldet(23650): {quar} malware quarantined from '/home/sssminfotech/public_html/sssm_infotech/css/skins/.683c9e91.ico' to '/usr/local/maldetect/quarantine/.683c9e91.ico.56466774' Oct 24 03:36:31 root maldet(23650): {scan} scan completed on : files 23577, malware hits 2, cleaned hits 0, time 285s Oct 24 03:36:31 root maldet(23650): {scan} scan report saved, to view run: maldet --report 211024-0331.23650 Oct 25 03:50:47 root maldet(10824): {update} checking for available updates... Oct 25 03:50:47 root maldet(10824): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 25 03:50:47 root maldet(10824): {update} hashing install files and checking against server... Oct 25 03:50:47 root maldet(10824): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 25 03:50:47 root maldet(10824): {update} latest version already installed. Oct 25 03:50:47 root maldet(10960): {sigup} performing signature update check... Oct 25 03:50:47 root maldet(10960): {sigup} local signature set is version 202110223732538 Oct 25 03:50:48 root maldet(10960): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 25 03:50:48 root maldet(10960): {sigup} latest signature set already installed Oct 25 03:50:48 root maldet(11076): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 25 03:50:48 root maldet(11076): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 25 03:50:48 root maldet(11076): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 25 03:50:48 root maldet(11076): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 25 03:50:48 root maldet(11076): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/cpchambers/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhivat/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fantamsecurities/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/manishajaiswal/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nihhash/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 25 03:50:51 root maldet(11076): {scan} file list completed in 3s, found 27137 files... Oct 25 03:50:51 root maldet(11076): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 25 03:50:51 root maldet(11076): {scan} scan of (27137 files) in progress... Oct 25 03:55:11 root maldet(11076): {scan} scan completed on : files 27137, malware hits 0, cleaned hits 0, time 263s Oct 25 03:55:11 root maldet(11076): {scan} scan report saved, to view run: maldet --report 211025-0350.11076 Oct 26 03:38:23 root maldet(10580): {update} checking for available updates... Oct 26 03:38:24 root maldet(10580): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 26 03:38:24 root maldet(10580): {update} hashing install files and checking against server... Oct 26 03:38:24 root maldet(10580): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 26 03:38:24 root maldet(10580): {update} latest version already installed. Oct 26 03:38:25 root maldet(10718): {sigup} performing signature update check... Oct 26 03:38:25 root maldet(10718): {sigup} local signature set is version 202110223732538 Oct 26 03:38:25 root maldet(10718): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 26 03:38:25 root maldet(10718): {sigup} new signature set 20211025249646 available Oct 26 03:38:25 root maldet(10718): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 26 03:38:26 root maldet(10718): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 26 03:38:27 root maldet(10718): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 26 03:38:27 root maldet(10718): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 26 03:38:27 root maldet(10718): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 26 03:38:27 root maldet(10718): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 26 03:38:27 root maldet(10718): {sigup} verified md5sum of maldet-sigpack.tgz Oct 26 03:38:28 root maldet(10718): {sigup} unpacked and installed maldet-sigpack.tgz Oct 26 03:38:28 root maldet(10718): {sigup} verified md5sum of maldet-clean.tgz Oct 26 03:38:28 root maldet(10718): {sigup} unpacked and installed maldet-clean.tgz Oct 26 03:38:28 root maldet(10718): {sigup} signature set update completed Oct 26 03:38:28 root maldet(10718): {sigup} 17258 signatures (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 26 03:38:28 root maldet(10966): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 26 03:38:41 root maldet(10966): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 26 03:38:41 root maldet(10966): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 26 03:38:41 root maldet(10966): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 26 03:38:41 root maldet(10966): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/cpchambers/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhivat/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fantamsecurities/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/manishajaiswal/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nihhash/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 26 03:38:44 root maldet(10966): {scan} file list completed in 3s, found 12428 files... Oct 26 03:38:44 root maldet(10966): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 26 03:38:44 root maldet(10966): {scan} scan of (12428 files) in progress... Oct 26 03:39:37 root maldet(10966): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/vendor/rs-plugin/images/.2691b928.ico Oct 26 03:39:37 root maldet(10966): {quar} malware quarantined from '/home/sssminfotech/public_html/vendor/rs-plugin/images/.2691b928.ico' to '/usr/local/maldetect/quarantine/.2691b928.ico.1839421900' Oct 26 03:39:37 root maldet(10966): {scan} scan completed on : files 12428, malware hits 1, cleaned hits 0, time 69s Oct 26 03:39:37 root maldet(10966): {scan} scan report saved, to view run: maldet --report 211026-0338.10966 Oct 27 03:42:38 root maldet(25128): {update} checking for available updates... Oct 27 03:42:39 root maldet(25128): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 27 03:42:39 root maldet(25128): {update} hashing install files and checking against server... Oct 27 03:42:39 root maldet(25128): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 27 03:42:39 root maldet(25128): {update} latest version already installed. Oct 27 03:42:39 root maldet(25267): {sigup} performing signature update check... Oct 27 03:42:39 root maldet(25267): {sigup} local signature set is version 20211025249646 Oct 27 03:42:39 root maldet(25267): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 27 03:42:39 root maldet(25267): {sigup} latest signature set already installed Oct 27 03:42:39 root maldet(25381): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 27 03:42:39 root maldet(25381): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 27 03:42:39 root maldet(25381): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 27 03:42:39 root maldet(25381): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 27 03:42:39 root maldet(25381): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/abhipreet/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/cpchambers/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhivat/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fantamsecurities/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/manishajaiswal/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nihhash/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 27 03:42:42 root maldet(25381): {scan} file list completed in 3s, found 6168 files... Oct 27 03:42:42 root maldet(25381): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 27 03:42:42 root maldet(25381): {scan} scan of (6168 files) in progress... Oct 27 03:43:12 root maldet(25381): {scan} scan completed on : files 6168, malware hits 0, cleaned hits 0, time 33s Oct 27 03:43:12 root maldet(25381): {scan} scan report saved, to view run: maldet --report 211027-0342.25381 Oct 28 03:17:09 root maldet(21011): {update} checking for available updates... Oct 28 03:17:10 root maldet(21011): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 28 03:17:10 root maldet(21011): {update} hashing install files and checking against server... Oct 28 03:17:10 root maldet(21011): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 28 03:17:10 root maldet(21011): {update} latest version already installed. Oct 28 03:17:10 root maldet(21149): {sigup} performing signature update check... Oct 28 03:17:10 root maldet(21149): {sigup} local signature set is version 20211025249646 Oct 28 03:17:11 root maldet(21149): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 28 03:17:11 root maldet(21149): {sigup} latest signature set already installed Oct 28 03:17:11 root maldet(21262): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 28 03:17:11 root maldet(21262): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 28 03:17:11 root maldet(21262): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 28 03:17:11 root maldet(21262): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 28 03:17:11 root maldet(21262): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/cpchambers/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhivat/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fantamsecurities/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/manishajaiswal/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 28 03:17:14 root maldet(21262): {scan} file list completed in 3s, found 6243 files... Oct 28 03:17:15 root maldet(21262): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 28 03:17:15 root maldet(21262): {scan} scan of (6243 files) in progress... Oct 28 03:17:43 root maldet(21262): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/css/.f83f2aea.ico Oct 28 03:17:44 root maldet(21262): {quar} malware quarantined from '/home/sssminfotech/public_html/css/.f83f2aea.ico' to '/usr/local/maldetect/quarantine/.f83f2aea.ico.1026216556' Oct 28 03:17:44 root maldet(21262): {scan} scan completed on : files 6243, malware hits 1, cleaned hits 0, time 33s Oct 28 03:17:44 root maldet(21262): {scan} scan report saved, to view run: maldet --report 211028-0317.21262 Oct 29 03:29:06 root maldet(6683): {update} checking for available updates... Oct 29 03:29:06 root maldet(6683): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 29 03:29:06 root maldet(6683): {update} hashing install files and checking against server... Oct 29 03:29:07 root maldet(6683): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 29 03:29:07 root maldet(6683): {update} latest version already installed. Oct 29 03:29:07 root maldet(6821): {sigup} performing signature update check... Oct 29 03:29:07 root maldet(6821): {sigup} local signature set is version 20211025249646 Oct 29 03:29:07 root maldet(6821): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 29 03:29:07 root maldet(6821): {sigup} new signature set 20211028966636 available Oct 29 03:29:07 root maldet(6821): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 29 03:29:08 root maldet(6821): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 29 03:29:09 root maldet(6821): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 29 03:29:09 root maldet(6821): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 29 03:29:10 root maldet(6821): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 29 03:29:10 root maldet(6821): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 29 03:29:10 root maldet(6821): {sigup} verified md5sum of maldet-sigpack.tgz Oct 29 03:29:10 root maldet(6821): {sigup} unpacked and installed maldet-sigpack.tgz Oct 29 03:29:10 root maldet(6821): {sigup} verified md5sum of maldet-clean.tgz Oct 29 03:29:10 root maldet(6821): {sigup} unpacked and installed maldet-clean.tgz Oct 29 03:29:10 root maldet(6821): {sigup} signature set update completed Oct 29 03:29:10 root maldet(6821): {sigup} 17258 signatures (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 29 03:29:10 root maldet(7097): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 29 03:29:23 root maldet(7097): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 29 03:29:23 root maldet(7097): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 29 03:29:23 root maldet(7097): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 29 03:29:23 root maldet(7097): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/cpchambers/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhivat/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fantamsecurities/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/manishajaiswal/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 29 03:29:26 root maldet(7097): {scan} file list completed in 3s, found 511 files... Oct 29 03:29:26 root maldet(7097): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 29 03:29:26 root maldet(7097): {scan} scan of (511 files) in progress... Oct 29 03:29:51 root maldet(7097): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/vendor/rs-plugin/js/.10c2a899.ico Oct 29 03:29:51 root maldet(7097): {quar} malware quarantined from '/home/sssminfotech/public_html/vendor/rs-plugin/js/.10c2a899.ico' to '/usr/local/maldetect/quarantine/.10c2a899.ico.184833551' Oct 29 03:29:51 root maldet(7097): {scan} scan completed on : files 511, malware hits 1, cleaned hits 0, time 41s Oct 29 03:29:51 root maldet(7097): {scan} scan report saved, to view run: maldet --report 211029-0329.7097 Oct 30 03:24:07 root maldet(24990): {update} checking for available updates... Oct 30 03:24:08 root maldet(24990): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 30 03:24:08 root maldet(24990): {update} hashing install files and checking against server... Oct 30 03:24:08 root maldet(24990): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 30 03:24:08 root maldet(24990): {update} latest version already installed. Oct 30 03:24:08 root maldet(25127): {sigup} performing signature update check... Oct 30 03:24:08 root maldet(25127): {sigup} local signature set is version 20211028966636 Oct 30 03:24:09 root maldet(25127): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 30 03:24:09 root maldet(25127): {sigup} latest signature set already installed Oct 30 03:24:09 root maldet(25247): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 30 03:24:10 root maldet(25247): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 30 03:24:10 root maldet(25247): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 30 03:24:10 root maldet(25247): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 30 03:24:10 root maldet(25247): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/cpchambers/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/delhivat/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fantamsecurities/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/manishajaiswal/public_html/" "/home/manojrat/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/mkmca/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 30 03:24:13 root maldet(25247): {scan} file list completed in 3s, found 667 files... Oct 30 03:24:13 root maldet(25247): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 30 03:24:13 root maldet(25247): {scan} scan of (667 files) in progress... Oct 30 03:24:32 root maldet(25247): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/xvywcc/.d58ce99f.ico Oct 30 03:24:32 root maldet(25247): {quar} malware quarantined from '/home/sssminfotech/public_html/xvywcc/.d58ce99f.ico' to '/usr/local/maldetect/quarantine/.d58ce99f.ico.721010106' Oct 30 03:24:33 root maldet(25247): {scan} scan completed on : files 667, malware hits 1, cleaned hits 0, time 24s Oct 30 03:24:33 root maldet(25247): {scan} scan report saved, to view run: maldet --report 211030-0324.25247 Oct 31 03:46:59 root maldet(10955): {update} checking for available updates... Oct 31 03:46:59 root maldet(10955): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 31 03:46:59 root maldet(10955): {update} hashing install files and checking against server... Oct 31 03:46:59 root maldet(10955): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 31 03:46:59 root maldet(10955): {update} latest version already installed. Oct 31 03:46:59 root maldet(11106): {sigup} performing signature update check... Oct 31 03:46:59 root maldet(11106): {sigup} local signature set is version 20211028966636 Oct 31 03:47:00 root maldet(11106): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 31 03:47:00 root maldet(11106): {sigup} latest signature set already installed Oct 31 03:47:00 root maldet(11225): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 31 03:47:01 root maldet(11225): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Oct 31 03:47:01 root maldet(11225): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 31 03:47:01 root maldet(11225): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 31 03:47:01 root maldet(11225): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 31 03:49:29 root maldet(11225): {scan} file list completed in 148s, found 594 files... Oct 31 03:49:29 root maldet(11225): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 31 03:49:29 root maldet(11225): {scan} scan of (594 files) in progress... Oct 31 03:50:06 root maldet(11225): {scan} scan completed on : files 594, malware hits 0, cleaned hits 0, time 184s Oct 31 03:50:06 root maldet(11225): {scan} scan report saved, to view run: maldet --report 211031-0347.11225 Nov 01 03:44:24 root maldet(25099): {update} checking for available updates... Nov 01 03:44:24 root maldet(25099): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 01 03:44:24 root maldet(25099): {update} hashing install files and checking against server... Nov 01 03:44:25 root maldet(25099): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 01 03:44:25 root maldet(25099): {update} latest version already installed. Nov 01 03:44:25 root maldet(25243): {sigup} performing signature update check... Nov 01 03:44:25 root maldet(25243): {sigup} local signature set is version 20211028966636 Nov 01 03:44:25 root maldet(25243): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 01 03:44:25 root maldet(25243): {sigup} new signature set 202110311676517 available Nov 01 03:44:25 root maldet(25243): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 01 03:44:26 root maldet(25243): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 01 03:44:26 root maldet(25243): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 01 03:44:26 root maldet(25243): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 01 03:44:26 root maldet(25243): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 01 03:44:26 root maldet(25243): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 01 03:44:26 root maldet(25243): {sigup} verified md5sum of maldet-sigpack.tgz Nov 01 03:44:27 root maldet(25243): {sigup} unpacked and installed maldet-sigpack.tgz Nov 01 03:44:27 root maldet(25243): {sigup} verified md5sum of maldet-clean.tgz Nov 01 03:44:27 root maldet(25243): {sigup} unpacked and installed maldet-clean.tgz Nov 01 03:44:27 root maldet(25243): {sigup} signature set update completed Nov 01 03:44:27 root maldet(25243): {sigup} 17258 signatures (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 01 03:44:27 root maldet(25536): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 01 03:44:41 root maldet(25536): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 01 03:44:41 root maldet(25536): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 01 03:44:41 root maldet(25536): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 01 03:44:41 root maldet(25536): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 01 04:07:14 root maldet(25536): {scan} file list completed in 1353s, found 132 files... Nov 01 04:07:14 root maldet(25536): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 01 04:07:14 root maldet(25536): {scan} scan of (132 files) in progress... Nov 01 04:07:57 root maldet(25536): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/js/.e42c7433.ico Nov 01 04:07:57 root maldet(25536): {quar} malware quarantined from '/home/sssminfotech/public_html/js/.e42c7433.ico' to '/usr/local/maldetect/quarantine/.e42c7433.ico.62728393' Nov 01 04:07:58 root maldet(25536): {scan} scan completed on : files 132, malware hits 1, cleaned hits 0, time 1411s Nov 01 04:07:58 root maldet(25536): {scan} scan report saved, to view run: maldet --report 211101-0344.25536 Nov 02 03:23:05 root maldet(5676): {update} checking for available updates... Nov 02 03:23:06 root maldet(5676): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 02 03:23:06 root maldet(5676): {update} hashing install files and checking against server... Nov 02 03:23:06 root maldet(5676): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 02 03:23:06 root maldet(5676): {update} latest version already installed. Nov 02 03:23:06 root maldet(5855): {sigup} performing signature update check... Nov 02 03:23:06 root maldet(5855): {sigup} local signature set is version 202110311676517 Nov 02 03:23:06 root maldet(5855): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 02 03:23:06 root maldet(5855): {sigup} new signature set 202111012307705 available Nov 02 03:23:06 root maldet(5855): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 02 03:23:07 root maldet(5855): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 02 03:23:07 root maldet(5855): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 02 03:23:07 root maldet(5855): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 02 03:23:07 root maldet(5855): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 02 03:23:08 root maldet(5855): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 02 03:23:08 root maldet(5855): {sigup} verified md5sum of maldet-sigpack.tgz Nov 02 03:23:08 root maldet(5855): {sigup} unpacked and installed maldet-sigpack.tgz Nov 02 03:23:08 root maldet(5855): {sigup} verified md5sum of maldet-clean.tgz Nov 02 03:23:08 root maldet(5855): {sigup} unpacked and installed maldet-clean.tgz Nov 02 03:23:08 root maldet(5855): {sigup} signature set update completed Nov 02 03:23:08 root maldet(5855): {sigup} 17258 signatures (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 02 03:23:08 root maldet(6111): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 02 03:23:22 root maldet(6111): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 02 03:23:22 root maldet(6111): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 02 03:23:22 root maldet(6111): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 02 03:23:22 root maldet(6111): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 02 03:23:25 root maldet(6111): {scan} file list completed in 3s, found 98 files... Nov 02 03:23:25 root maldet(6111): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 02 03:23:25 root maldet(6111): {scan} scan of (98 files) in progress... Nov 02 03:23:49 root maldet(6111): {scan} scan completed on : files 98, malware hits 0, cleaned hits 0, time 41s Nov 02 03:23:49 root maldet(6111): {scan} scan report saved, to view run: maldet --report 211102-0323.6111 Nov 03 03:47:44 root maldet(17083): {update} checking for available updates... Nov 03 03:47:44 root maldet(17083): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 03 03:47:44 root maldet(17083): {update} hashing install files and checking against server... Nov 03 03:47:45 root maldet(17083): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 03 03:47:45 root maldet(17083): {update} latest version already installed. Nov 03 03:47:45 root maldet(17234): {sigup} performing signature update check... Nov 03 03:47:45 root maldet(17234): {sigup} local signature set is version 202111012307705 Nov 03 03:47:45 root maldet(17234): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 03 03:47:45 root maldet(17234): {sigup} latest signature set already installed Nov 03 03:47:45 root maldet(17347): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 03 03:47:46 root maldet(17347): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 03 03:47:46 root maldet(17347): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 03 03:47:46 root maldet(17347): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 03 03:47:46 root maldet(17347): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 03 03:47:50 root maldet(17347): {scan} file list completed in 4s, found 414 files... Nov 03 03:47:50 root maldet(17347): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 03 03:47:50 root maldet(17347): {scan} scan of (414 files) in progress... Nov 03 03:48:05 root maldet(17347): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/vendor/rs-plugin/font/.b1dd26d5.ico Nov 03 03:48:05 root maldet(17347): {quar} malware quarantined from '/home/sssminfotech/public_html/vendor/rs-plugin/font/.b1dd26d5.ico' to '/usr/local/maldetect/quarantine/.b1dd26d5.ico.628816992' Nov 03 03:48:05 root maldet(17347): {scan} scan completed on : files 414, malware hits 1, cleaned hits 0, time 20s Nov 03 03:48:05 root maldet(17347): {scan} scan report saved, to view run: maldet --report 211103-0347.17347 Nov 04 03:44:48 root maldet(2082): {update} checking for available updates... Nov 04 03:44:48 root maldet(2082): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 04 03:44:48 root maldet(2082): {update} hashing install files and checking against server... Nov 04 03:44:48 root maldet(2082): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 04 03:44:48 root maldet(2082): {update} latest version already installed. Nov 04 03:44:49 root maldet(2226): {sigup} performing signature update check... Nov 04 03:44:49 root maldet(2226): {sigup} local signature set is version 202111012307705 Nov 04 03:44:49 root maldet(2226): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 04 03:44:49 root maldet(2226): {sigup} latest signature set already installed Nov 04 03:44:49 root maldet(2372): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 04 03:44:49 root maldet(2372): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 04 03:44:49 root maldet(2372): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 04 03:44:49 root maldet(2372): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 04 03:44:49 root maldet(2372): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 04 03:44:52 root maldet(2372): {scan} file list completed in 3s, found 232 files... Nov 04 03:44:52 root maldet(2372): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 04 03:44:52 root maldet(2372): {scan} scan of (232 files) in progress... Nov 04 03:45:02 root maldet(2372): {scan} scan completed on : files 232, malware hits 0, cleaned hits 0, time 12s Nov 04 03:45:02 root maldet(2372): {scan} scan report saved, to view run: maldet --report 211104-0344.2372 Nov 05 03:23:01 root maldet(25946): {update} checking for available updates... Nov 05 03:23:02 root maldet(25946): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 05 03:23:02 root maldet(25946): {update} hashing install files and checking against server... Nov 05 03:23:02 root maldet(25946): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 05 03:23:02 root maldet(25946): {update} latest version already installed. Nov 05 03:23:02 root maldet(26083): {sigup} performing signature update check... Nov 05 03:23:02 root maldet(26083): {sigup} local signature set is version 202111012307705 Nov 05 03:23:03 root maldet(26083): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 05 03:23:03 root maldet(26083): {sigup} new signature set 202111042992482 available Nov 05 03:23:03 root maldet(26083): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 05 03:23:03 root maldet(26083): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 05 03:23:03 root maldet(26083): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 05 03:23:03 root maldet(26083): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 05 03:23:04 root maldet(26083): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 05 03:23:04 root maldet(26083): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 05 03:23:04 root maldet(26083): {sigup} verified md5sum of maldet-sigpack.tgz Nov 05 03:23:04 root maldet(26083): {sigup} unpacked and installed maldet-sigpack.tgz Nov 05 03:23:04 root maldet(26083): {sigup} verified md5sum of maldet-clean.tgz Nov 05 03:23:04 root maldet(26083): {sigup} unpacked and installed maldet-clean.tgz Nov 05 03:23:04 root maldet(26083): {sigup} signature set update completed Nov 05 03:23:04 root maldet(26083): {sigup} 17258 signatures (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 05 03:23:04 root maldet(26328): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 05 03:23:18 root maldet(26328): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 05 03:23:18 root maldet(26328): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 05 03:23:18 root maldet(26328): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 05 03:23:18 root maldet(26328): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 05 03:23:20 root maldet(26328): {scan} file list completed in 2s, found 223 files... Nov 05 03:23:20 root maldet(26328): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 05 03:23:20 root maldet(26328): {scan} scan of (223 files) in progress... Nov 05 03:23:39 root maldet(26328): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/sssm_infotech/img/logos/.7dd3f1e9.ico Nov 05 03:23:39 root maldet(26328): {quar} malware quarantined from '/home/sssminfotech/public_html/sssm_infotech/img/logos/.7dd3f1e9.ico' to '/usr/local/maldetect/quarantine/.7dd3f1e9.ico.996717355' Nov 05 03:23:39 root maldet(26328): {scan} scan completed on : files 223, malware hits 1, cleaned hits 0, time 35s Nov 05 03:23:39 root maldet(26328): {scan} scan report saved, to view run: maldet --report 211105-0323.26328 Nov 06 03:35:44 root maldet(496): {update} checking for available updates... Nov 06 03:35:44 root maldet(496): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 06 03:35:44 root maldet(496): {update} hashing install files and checking against server... Nov 06 03:35:45 root maldet(496): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 06 03:35:45 root maldet(496): {update} latest version already installed. Nov 06 03:35:45 root maldet(668): {sigup} performing signature update check... Nov 06 03:35:45 root maldet(668): {sigup} local signature set is version 202111042992482 Nov 06 03:35:45 root maldet(668): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 06 03:35:45 root maldet(668): {sigup} latest signature set already installed Nov 06 03:35:45 root maldet(781): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 06 03:35:45 root maldet(781): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 06 03:35:45 root maldet(781): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 06 03:35:45 root maldet(781): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 06 03:35:45 root maldet(781): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 06 03:35:48 root maldet(781): {scan} file list completed in 3s, found 152 files... Nov 06 03:35:48 root maldet(781): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 06 03:35:48 root maldet(781): {scan} scan of (152 files) in progress... Nov 06 03:36:04 root maldet(781): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/vendor/rs-plugin/images/.e547f256.ico Nov 06 03:36:04 root maldet(781): {quar} malware quarantined from '/home/sssminfotech/public_html/vendor/rs-plugin/images/.e547f256.ico' to '/usr/local/maldetect/quarantine/.e547f256.ico.215915517' Nov 06 03:36:04 root maldet(781): {scan} scan completed on : files 152, malware hits 1, cleaned hits 0, time 19s Nov 06 03:36:04 root maldet(781): {scan} scan report saved, to view run: maldet --report 211106-0335.781 Nov 07 03:29:59 root maldet(27649): {update} checking for available updates... Nov 07 03:29:59 root maldet(27649): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 07 03:29:59 root maldet(27649): {update} hashing install files and checking against server... Nov 07 03:30:00 root maldet(27649): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 07 03:30:00 root maldet(27649): {update} latest version already installed. Nov 07 03:30:00 root maldet(27786): {sigup} performing signature update check... Nov 07 03:30:00 root maldet(27786): {sigup} local signature set is version 202111042992482 Nov 07 03:30:00 root maldet(27786): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 07 03:30:00 root maldet(27786): {sigup} latest signature set already installed Nov 07 03:30:00 root maldet(27901): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 07 03:30:00 root maldet(27901): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 07 03:30:00 root maldet(27901): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 07 03:30:00 root maldet(27901): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 07 03:30:00 root maldet(27901): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 07 03:30:03 root maldet(27901): {scan} file list completed in 3s, found 132 files... Nov 07 03:30:03 root maldet(27901): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 07 03:30:03 root maldet(27901): {scan} scan of (132 files) in progress... Nov 07 03:30:15 root maldet(27901): {scan} scan completed on : files 132, malware hits 0, cleaned hits 0, time 15s Nov 07 03:30:15 root maldet(27901): {scan} scan report saved, to view run: maldet --report 211107-0330.27901 Nov 08 03:34:19 root maldet(30934): {update} checking for available updates... Nov 08 03:34:19 root maldet(30934): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 08 03:34:19 root maldet(30934): {update} hashing install files and checking against server... Nov 08 03:34:20 root maldet(30934): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 08 03:34:20 root maldet(30934): {update} latest version already installed. Nov 08 03:34:20 root maldet(31070): {sigup} performing signature update check... Nov 08 03:34:20 root maldet(31070): {sigup} local signature set is version 202111042992482 Nov 08 03:34:20 root maldet(31070): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 08 03:34:20 root maldet(31070): {sigup} new signature set 202111073667093 available Nov 08 03:34:20 root maldet(31070): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 08 03:34:21 root maldet(31070): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 08 03:34:21 root maldet(31070): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 08 03:34:21 root maldet(31070): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 08 03:34:21 root maldet(31070): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 08 03:34:22 root maldet(31070): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 08 03:34:22 root maldet(31070): {sigup} verified md5sum of maldet-sigpack.tgz Nov 08 03:34:22 root maldet(31070): {sigup} unpacked and installed maldet-sigpack.tgz Nov 08 03:34:22 root maldet(31070): {sigup} verified md5sum of maldet-clean.tgz Nov 08 03:34:22 root maldet(31070): {sigup} unpacked and installed maldet-clean.tgz Nov 08 03:34:22 root maldet(31070): {sigup} signature set update completed Nov 08 03:34:22 root maldet(31070): {sigup} 17258 signatures (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 08 03:34:22 root maldet(31311): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 08 03:34:35 root maldet(31311): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 08 03:34:35 root maldet(31311): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 08 03:34:35 root maldet(31311): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 08 03:34:35 root maldet(31311): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 08 03:34:37 root maldet(31311): {scan} file list completed in 2s, found 123 files... Nov 08 03:34:37 root maldet(31311): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 08 03:34:37 root maldet(31311): {scan} scan of (123 files) in progress... Nov 08 03:34:55 root maldet(31311): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/vendor/rs-plugin/images/.7af4273c.ico Nov 08 03:34:55 root maldet(31311): {quar} malware quarantined from '/home/sssminfotech/public_html/vendor/rs-plugin/images/.7af4273c.ico' to '/usr/local/maldetect/quarantine/.7af4273c.ico.3028930290' Nov 08 03:34:56 root maldet(31311): {scan} scan completed on : files 123, malware hits 1, cleaned hits 0, time 33s Nov 08 03:34:56 root maldet(31311): {scan} scan report saved, to view run: maldet --report 211108-0334.31311 Nov 09 03:29:29 root maldet(7721): {update} checking for available updates... Nov 09 03:29:29 root maldet(7721): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 09 03:29:29 root maldet(7721): {update} hashing install files and checking against server... Nov 09 03:29:30 root maldet(7721): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 09 03:29:30 root maldet(7721): {update} latest version already installed. Nov 09 03:29:30 root maldet(7954): {sigup} performing signature update check... Nov 09 03:29:30 root maldet(7954): {sigup} local signature set is version 202111073667093 Nov 09 03:29:30 root maldet(7954): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 09 03:29:30 root maldet(7954): {sigup} latest signature set already installed Nov 09 03:29:31 root maldet(8073): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 09 03:29:31 root maldet(8073): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 09 03:29:31 root maldet(8073): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 09 03:29:31 root maldet(8073): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 09 03:29:31 root maldet(8073): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 09 03:29:33 root maldet(8073): {scan} file list completed in 2s, found 1278 files... Nov 09 03:29:33 root maldet(8073): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 09 03:29:33 root maldet(8073): {scan} scan of (1278 files) in progress... Nov 09 03:29:49 root maldet(8073): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/css/fonts/.9da0802d.ico Nov 09 03:29:49 root maldet(8073): {quar} malware quarantined from '/home/sssminfotech/public_html/css/fonts/.9da0802d.ico' to '/usr/local/maldetect/quarantine/.9da0802d.ico.24108037' Nov 09 03:29:49 root maldet(8073): {scan} scan completed on : files 1278, malware hits 1, cleaned hits 0, time 18s Nov 09 03:29:49 root maldet(8073): {scan} scan report saved, to view run: maldet --report 211109-0329.8073 Nov 10 03:19:34 root maldet(9065): {update} checking for available updates... Nov 10 03:19:35 root maldet(9065): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 10 03:19:35 root maldet(9065): {update} hashing install files and checking against server... Nov 10 03:19:35 root maldet(9065): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 10 03:19:35 root maldet(9065): {update} latest version already installed. Nov 10 03:19:35 root maldet(9202): {sigup} performing signature update check... Nov 10 03:19:35 root maldet(9202): {sigup} local signature set is version 202111073667093 Nov 10 03:19:35 root maldet(9202): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 10 03:19:36 root maldet(9202): {sigup} latest signature set already installed Nov 10 03:19:36 root maldet(9323): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 10 03:19:36 root maldet(9323): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 10 03:19:36 root maldet(9323): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 10 03:19:36 root maldet(9323): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 10 03:19:36 root maldet(9323): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 10 03:19:38 root maldet(9323): {scan} file list completed in 2s, found 281 files... Nov 10 03:19:38 root maldet(9323): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 10 03:19:38 root maldet(9323): {scan} scan of (281 files) in progress... Nov 10 03:20:12 root maldet(9323): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/sssm_infotech/img/sssm/.ecba127d.ico Nov 10 03:20:12 root maldet(9323): {quar} malware quarantined from '/home/sssminfotech/public_html/sssm_infotech/img/sssm/.ecba127d.ico' to '/usr/local/maldetect/quarantine/.ecba127d.ico.154029270' Nov 10 03:20:12 root maldet(9323): {scan} scan completed on : files 281, malware hits 1, cleaned hits 0, time 36s Nov 10 03:20:12 root maldet(9323): {scan} scan report saved, to view run: maldet --report 211110-0319.9323 Nov 11 03:50:43 root maldet(1667): {update} checking for available updates... Nov 11 03:50:43 root maldet(1667): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 11 03:50:43 root maldet(1667): {update} hashing install files and checking against server... Nov 11 03:50:43 root maldet(1667): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 11 03:50:43 root maldet(1667): {update} latest version already installed. Nov 11 03:50:43 root maldet(1842): {sigup} performing signature update check... Nov 11 03:50:43 root maldet(1842): {sigup} local signature set is version 202111073667093 Nov 11 03:50:44 root maldet(1842): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 11 03:50:44 root maldet(1842): {sigup} new signature set 20211110148524 available Nov 11 03:50:44 root maldet(1842): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 11 03:50:44 root maldet(1842): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 11 03:50:44 root maldet(1842): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 11 03:50:44 root maldet(1842): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 11 03:50:44 root maldet(1842): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 11 03:50:45 root maldet(1842): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 11 03:50:45 root maldet(1842): {sigup} verified md5sum of maldet-sigpack.tgz Nov 11 03:50:45 root maldet(1842): {sigup} unpacked and installed maldet-sigpack.tgz Nov 11 03:50:45 root maldet(1842): {sigup} verified md5sum of maldet-clean.tgz Nov 11 03:50:45 root maldet(1842): {sigup} unpacked and installed maldet-clean.tgz Nov 11 03:50:45 root maldet(1842): {sigup} signature set update completed Nov 11 03:50:45 root maldet(1842): {sigup} 17258 signatures (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 11 03:50:45 root maldet(2083): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 11 03:50:58 root maldet(2083): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 11 03:50:58 root maldet(2083): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 11 03:50:58 root maldet(2083): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 11 03:50:58 root maldet(2083): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 11 03:51:01 root maldet(2083): {scan} file list completed in 3s, found 173 files... Nov 11 03:51:01 root maldet(2083): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 11 03:51:01 root maldet(2083): {scan} scan of (173 files) in progress... Nov 11 03:51:21 root maldet(2083): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/vendor/jquery/.dfde03d6.ico Nov 11 03:51:22 root maldet(2083): {quar} malware quarantined from '/home/sssminfotech/public_html/vendor/jquery/.dfde03d6.ico' to '/usr/local/maldetect/quarantine/.dfde03d6.ico.2135117107' Nov 11 03:51:22 root maldet(2083): {scan} scan completed on : files 173, malware hits 1, cleaned hits 0, time 37s Nov 11 03:51:22 root maldet(2083): {scan} scan report saved, to view run: maldet --report 211111-0350.2083 Nov 12 03:42:51 root maldet(16843): {update} checking for available updates... Nov 12 03:42:52 root maldet(16843): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 12 03:42:52 root maldet(16843): {update} hashing install files and checking against server... Nov 12 03:42:52 root maldet(16843): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 12 03:42:52 root maldet(16843): {update} latest version already installed. Nov 12 03:42:52 root maldet(16987): {sigup} performing signature update check... Nov 12 03:42:52 root maldet(16987): {sigup} local signature set is version 20211110148524 Nov 12 03:42:53 root maldet(16987): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 12 03:42:53 root maldet(16987): {sigup} latest signature set already installed Nov 12 03:42:53 root maldet(17100): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 12 03:42:53 root maldet(17100): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 12 03:42:53 root maldet(17100): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 12 03:42:53 root maldet(17100): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 12 03:42:53 root maldet(17100): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 12 03:42:55 root maldet(17100): {scan} file list completed in 2s, found 496 files... Nov 12 03:42:55 root maldet(17100): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 12 03:42:55 root maldet(17100): {scan} scan of (496 files) in progress... Nov 12 03:43:12 root maldet(17100): {scan} scan completed on : files 496, malware hits 0, cleaned hits 0, time 19s Nov 12 03:43:12 root maldet(17100): {scan} scan report saved, to view run: maldet --report 211112-0342.17100 Nov 13 03:28:44 root maldet(15783): {update} checking for available updates... Nov 13 03:28:45 root maldet(15783): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 13 03:28:45 root maldet(15783): {update} hashing install files and checking against server... Nov 13 03:28:45 root maldet(15783): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 13 03:28:45 root maldet(15783): {update} latest version already installed. Nov 13 03:28:45 root maldet(15960): {sigup} performing signature update check... Nov 13 03:28:46 root maldet(15960): {sigup} local signature set is version 20211110148524 Nov 13 03:28:46 root maldet(15960): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 13 03:28:46 root maldet(15960): {sigup} latest signature set already installed Nov 13 03:28:46 root maldet(16083): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 13 03:28:46 root maldet(16083): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 13 03:28:46 root maldet(16083): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 13 03:28:46 root maldet(16083): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 13 03:28:46 root maldet(16083): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 13 03:28:49 root maldet(16083): {scan} file list completed in 3s, found 144 files... Nov 13 03:28:49 root maldet(16083): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 13 03:28:49 root maldet(16083): {scan} scan of (144 files) in progress... Nov 13 03:28:57 root maldet(16083): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/vendor/rs-plugin/font/.ed0eec15.ico Nov 13 03:28:57 root maldet(16083): {quar} malware quarantined from '/home/sssminfotech/public_html/vendor/rs-plugin/font/.ed0eec15.ico' to '/usr/local/maldetect/quarantine/.ed0eec15.ico.188309883' Nov 13 03:28:57 root maldet(16083): {scan} scan completed on : files 144, malware hits 1, cleaned hits 0, time 11s Nov 13 03:28:57 root maldet(16083): {scan} scan report saved, to view run: maldet --report 211113-0328.16083 Nov 14 03:35:41 root maldet(16304): {update} checking for available updates... Nov 14 03:35:42 root maldet(16304): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 14 03:35:42 root maldet(16304): {update} hashing install files and checking against server... Nov 14 03:35:42 root maldet(16304): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 14 03:35:42 root maldet(16304): {update} latest version already installed. Nov 14 03:35:42 root maldet(16459): {sigup} performing signature update check... Nov 14 03:35:43 root maldet(16459): {sigup} local signature set is version 20211110148524 Nov 14 03:35:43 root maldet(16459): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 14 03:35:43 root maldet(16459): {sigup} new signature set 20211113845896 available Nov 14 03:35:43 root maldet(16459): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 14 03:35:44 root maldet(16459): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 14 03:35:44 root maldet(16459): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 14 03:35:44 root maldet(16459): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 14 03:35:45 root maldet(16459): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 14 03:35:45 root maldet(16459): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 14 03:35:45 root maldet(16459): {sigup} verified md5sum of maldet-sigpack.tgz Nov 14 03:35:45 root maldet(16459): {sigup} unpacked and installed maldet-sigpack.tgz Nov 14 03:35:46 root maldet(16459): {sigup} verified md5sum of maldet-clean.tgz Nov 14 03:35:46 root maldet(16459): {sigup} unpacked and installed maldet-clean.tgz Nov 14 03:35:46 root maldet(16459): {sigup} signature set update completed Nov 14 03:35:46 root maldet(16459): {sigup} 17258 signatures (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 14 03:35:46 root maldet(16774): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 14 03:35:59 root maldet(16774): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 14 03:35:59 root maldet(16774): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 14 03:35:59 root maldet(16774): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 14 03:35:59 root maldet(16774): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 14 03:36:01 root maldet(16774): {scan} file list completed in 2s, found 128 files... Nov 14 03:36:01 root maldet(16774): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 14 03:36:01 root maldet(16774): {scan} scan of (128 files) in progress... Nov 14 03:36:20 root maldet(16774): {scan} scan completed on : files 128, malware hits 0, cleaned hits 0, time 34s Nov 14 03:36:20 root maldet(16774): {scan} scan report saved, to view run: maldet --report 211114-0335.16774 Nov 15 03:52:06 root maldet(1995): {update} checking for available updates... Nov 15 03:52:08 root maldet(1995): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 15 03:52:08 root maldet(1995): {update} hashing install files and checking against server... Nov 15 03:52:08 root maldet(1995): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 15 03:52:08 root maldet(1995): {update} latest version already installed. Nov 15 03:52:09 root maldet(2170): {sigup} performing signature update check... Nov 15 03:52:09 root maldet(2170): {sigup} local signature set is version 20211113845896 Nov 15 03:52:09 root maldet(2170): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 15 03:52:09 root maldet(2170): {sigup} latest signature set already installed Nov 15 03:52:09 root maldet(2298): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 15 03:52:09 root maldet(2298): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 15 03:52:09 root maldet(2298): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 15 03:52:09 root maldet(2298): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 15 03:52:09 root maldet(2298): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 15 03:52:12 root maldet(2298): {scan} file list completed in 3s, found 137 files... Nov 15 03:52:12 root maldet(2298): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 15 03:52:12 root maldet(2298): {scan} scan of (137 files) in progress... Nov 15 03:52:22 root maldet(2298): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/sssm_infotech/img/slides/.f1531a95.ico Nov 15 03:52:22 root maldet(2298): {quar} malware quarantined from '/home/sssminfotech/public_html/sssm_infotech/img/slides/.f1531a95.ico' to '/usr/local/maldetect/quarantine/.f1531a95.ico.22547349' Nov 15 03:52:22 root maldet(2298): {scan} scan completed on : files 137, malware hits 1, cleaned hits 0, time 13s Nov 15 03:52:22 root maldet(2298): {scan} scan report saved, to view run: maldet --report 211115-0352.2298 Nov 16 03:42:25 root maldet(29863): {update} checking for available updates... Nov 16 03:42:26 root maldet(29863): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 16 03:42:26 root maldet(29863): {update} hashing install files and checking against server... Nov 16 03:42:26 root maldet(29863): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 16 03:42:26 root maldet(29863): {update} latest version already installed. Nov 16 03:42:27 root maldet(29998): {sigup} performing signature update check... Nov 16 03:42:27 root maldet(29998): {sigup} local signature set is version 20211113845896 Nov 16 03:42:28 root maldet(29998): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 16 03:42:28 root maldet(29998): {sigup} latest signature set already installed Nov 16 03:42:28 root maldet(30113): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 16 03:42:28 root maldet(30113): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 16 03:42:28 root maldet(30113): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 16 03:42:28 root maldet(30113): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 16 03:42:28 root maldet(30113): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 16 03:42:31 root maldet(30113): {scan} file list completed in 3s, found 132 files... Nov 16 03:42:31 root maldet(30113): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 16 03:42:31 root maldet(30113): {scan} scan of (132 files) in progress... Nov 16 03:42:38 root maldet(30113): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/vendor/rs-plugin/font/.36489827.ico Nov 16 03:42:38 root maldet(30113): {quar} malware quarantined from '/home/sssminfotech/public_html/vendor/rs-plugin/font/.36489827.ico' to '/usr/local/maldetect/quarantine/.36489827.ico.2926111032' Nov 16 03:42:38 root maldet(30113): {scan} scan completed on : files 132, malware hits 1, cleaned hits 0, time 10s Nov 16 03:42:38 root maldet(30113): {scan} scan report saved, to view run: maldet --report 211116-0342.30113 Nov 17 03:58:02 root maldet(28292): {update} checking for available updates... Nov 17 03:58:03 root maldet(28292): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 17 03:58:03 root maldet(28292): {update} hashing install files and checking against server... Nov 17 03:58:03 root maldet(28292): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 17 03:58:03 root maldet(28292): {update} latest version already installed. Nov 17 03:58:04 root maldet(28460): {sigup} performing signature update check... Nov 17 03:58:04 root maldet(28460): {sigup} local signature set is version 20211113845896 Nov 17 03:58:04 root maldet(28460): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 17 03:58:04 root maldet(28460): {sigup} new signature set 202111161522908 available Nov 17 03:58:04 root maldet(28460): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 17 03:58:05 root maldet(28460): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 17 03:58:06 root maldet(28460): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 17 03:58:06 root maldet(28460): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 17 03:58:06 root maldet(28460): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 17 03:58:07 root maldet(28460): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 17 03:58:07 root maldet(28460): {sigup} verified md5sum of maldet-sigpack.tgz Nov 17 03:58:07 root maldet(28460): {sigup} unpacked and installed maldet-sigpack.tgz Nov 17 03:58:07 root maldet(28460): {sigup} verified md5sum of maldet-clean.tgz Nov 17 03:58:07 root maldet(28460): {sigup} unpacked and installed maldet-clean.tgz Nov 17 03:58:07 root maldet(28460): {sigup} signature set update completed Nov 17 03:58:07 root maldet(28460): {sigup} 17258 signatures (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 17 03:58:07 root maldet(28777): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 17 03:58:20 root maldet(28777): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 17 03:58:20 root maldet(28777): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 17 03:58:20 root maldet(28777): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 17 03:58:20 root maldet(28777): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 17 03:58:23 root maldet(28777): {scan} file list completed in 3s, found 160 files... Nov 17 03:58:23 root maldet(28777): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 17 03:58:23 root maldet(28777): {scan} scan of (160 files) in progress... Nov 17 03:58:44 root maldet(28777): {scan} scan completed on : files 160, malware hits 0, cleaned hits 0, time 37s Nov 17 03:58:44 root maldet(28777): {scan} scan report saved, to view run: maldet --report 211117-0358.28777 Nov 18 03:52:20 root maldet(12126): {update} checking for available updates... Nov 18 03:52:21 root maldet(12126): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 18 03:52:21 root maldet(12126): {update} hashing install files and checking against server... Nov 18 03:52:22 root maldet(12126): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 18 03:52:22 root maldet(12126): {update} latest version already installed. Nov 18 03:52:22 root maldet(12301): {sigup} performing signature update check... Nov 18 03:52:22 root maldet(12301): {sigup} local signature set is version 202111161522908 Nov 18 03:52:23 root maldet(12301): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 18 03:52:23 root maldet(12301): {sigup} latest signature set already installed Nov 18 03:52:23 root maldet(12423): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 18 03:52:23 root maldet(12423): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 18 03:52:23 root maldet(12423): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 18 03:52:23 root maldet(12423): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 18 03:52:23 root maldet(12423): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 18 03:52:26 root maldet(12423): {scan} file list completed in 3s, found 127 files... Nov 18 03:52:26 root maldet(12423): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 18 03:52:26 root maldet(12423): {scan} scan of (127 files) in progress... Nov 18 03:52:33 root maldet(12423): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/sssm_infotech/img/sssm/.b02bf9f9.ico Nov 18 03:52:33 root maldet(12423): {quar} malware quarantined from '/home/sssminfotech/public_html/sssm_infotech/img/sssm/.b02bf9f9.ico' to '/usr/local/maldetect/quarantine/.b02bf9f9.ico.1613129484' Nov 18 03:52:33 root maldet(12423): {scan} scan completed on : files 127, malware hits 1, cleaned hits 0, time 10s Nov 18 03:52:33 root maldet(12423): {scan} scan report saved, to view run: maldet --report 211118-0352.12423 Nov 19 03:26:18 root maldet(10526): {update} checking for available updates... Nov 19 03:26:19 root maldet(10526): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 19 03:26:19 root maldet(10526): {update} hashing install files and checking against server... Nov 19 03:26:20 root maldet(10526): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 19 03:26:20 root maldet(10526): {update} latest version already installed. Nov 19 03:26:20 root maldet(10688): {sigup} performing signature update check... Nov 19 03:26:20 root maldet(10688): {sigup} local signature set is version 202111161522908 Nov 19 03:26:21 root maldet(10688): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 19 03:26:21 root maldet(10688): {sigup} latest signature set already installed Nov 19 03:26:21 root maldet(10815): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 19 03:26:21 root maldet(10815): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 19 03:26:21 root maldet(10815): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 19 03:26:21 root maldet(10815): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 19 03:26:21 root maldet(10815): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 19 03:26:24 root maldet(10815): {scan} file list completed in 3s, found 125 files... Nov 19 03:26:24 root maldet(10815): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 19 03:26:24 root maldet(10815): {scan} scan of (125 files) in progress... Nov 19 03:26:35 root maldet(10815): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/vendor/rs-plugin/font/.9ba676f2.ico Nov 19 03:26:35 root maldet(10815): {quar} malware quarantined from '/home/sssminfotech/public_html/vendor/rs-plugin/font/.9ba676f2.ico' to '/usr/local/maldetect/quarantine/.9ba676f2.ico.30600724' Nov 19 03:26:35 root maldet(10815): {scan} scan completed on : files 125, malware hits 1, cleaned hits 0, time 14s Nov 19 03:26:35 root maldet(10815): {scan} scan report saved, to view run: maldet --report 211119-0326.10815 Nov 20 03:12:57 root maldet(20465): {update} checking for available updates... Nov 20 03:12:57 root maldet(20465): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 20 03:12:57 root maldet(20465): {update} hashing install files and checking against server... Nov 20 03:12:58 root maldet(20465): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 20 03:12:58 root maldet(20465): {update} latest version already installed. Nov 20 03:12:58 root maldet(20613): {sigup} performing signature update check... Nov 20 03:12:58 root maldet(20613): {sigup} local signature set is version 202111161522908 Nov 20 03:12:59 root maldet(20613): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 20 03:12:59 root maldet(20613): {sigup} new signature set 202111192199620 available Nov 20 03:12:59 root maldet(20613): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 20 03:13:00 root maldet(20613): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 20 03:13:00 root maldet(20613): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 20 03:13:00 root maldet(20613): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 20 03:13:01 root maldet(20613): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 20 03:13:01 root maldet(20613): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 20 03:13:01 root maldet(20613): {sigup} verified md5sum of maldet-sigpack.tgz Nov 20 03:13:01 root maldet(20613): {sigup} unpacked and installed maldet-sigpack.tgz Nov 20 03:13:01 root maldet(20613): {sigup} verified md5sum of maldet-clean.tgz Nov 20 03:13:01 root maldet(20613): {sigup} unpacked and installed maldet-clean.tgz Nov 20 03:13:01 root maldet(20613): {sigup} signature set update completed Nov 20 03:13:01 root maldet(20613): {sigup} 17258 signatures (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 20 03:13:01 root maldet(20893): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 20 03:13:14 root maldet(20893): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 20 03:13:14 root maldet(20893): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 20 03:13:14 root maldet(20893): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 20 03:13:14 root maldet(20893): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 20 03:13:17 root maldet(20893): {scan} file list completed in 3s, found 133 files... Nov 20 03:13:17 root maldet(20893): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 20 03:13:17 root maldet(20893): {scan} scan of (133 files) in progress... Nov 20 03:13:34 root maldet(20893): {scan} scan completed on : files 133, malware hits 0, cleaned hits 0, time 33s Nov 20 03:13:34 root maldet(20893): {scan} scan report saved, to view run: maldet --report 211120-0313.20893 Nov 21 03:21:05 root maldet(1013): {update} checking for available updates... Nov 21 03:21:06 root maldet(1013): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 21 03:21:06 root maldet(1013): {update} hashing install files and checking against server... Nov 21 03:21:07 root maldet(1013): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 21 03:21:07 root maldet(1013): {update} latest version already installed. Nov 21 03:21:07 root maldet(1200): {sigup} performing signature update check... Nov 21 03:21:07 root maldet(1200): {sigup} local signature set is version 202111192199620 Nov 21 03:21:08 root maldet(1200): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 21 03:21:08 root maldet(1200): {sigup} latest signature set already installed Nov 21 03:21:08 root maldet(1313): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 21 03:21:08 root maldet(1313): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 21 03:21:08 root maldet(1313): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 21 03:21:08 root maldet(1313): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 21 03:21:08 root maldet(1313): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 21 03:21:11 root maldet(1313): {scan} file list completed in 3s, found 150 files... Nov 21 03:21:11 root maldet(1313): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 21 03:21:11 root maldet(1313): {scan} scan of (150 files) in progress... Nov 21 03:21:22 root maldet(1313): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/vendor/jquery/.7669a550.ico Nov 21 03:21:22 root maldet(1313): {quar} malware quarantined from '/home/sssminfotech/public_html/vendor/jquery/.7669a550.ico' to '/usr/local/maldetect/quarantine/.7669a550.ico.827111703' Nov 21 03:21:22 root maldet(1313): {scan} scan completed on : files 150, malware hits 1, cleaned hits 0, time 14s Nov 21 03:21:22 root maldet(1313): {scan} scan report saved, to view run: maldet --report 211121-0321.1313 Nov 22 03:50:45 root maldet(18324): {update} checking for available updates... Nov 22 03:50:46 root maldet(18324): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 22 03:50:46 root maldet(18324): {update} hashing install files and checking against server... Nov 22 03:50:46 root maldet(18324): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 22 03:50:46 root maldet(18324): {update} latest version already installed. Nov 22 03:50:46 root maldet(18472): {sigup} performing signature update check... Nov 22 03:50:46 root maldet(18472): {sigup} local signature set is version 202111192199620 Nov 22 03:50:47 root maldet(18472): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 22 03:50:47 root maldet(18472): {sigup} latest signature set already installed Nov 22 03:50:47 root maldet(18590): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 22 03:50:47 root maldet(18590): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 22 03:50:47 root maldet(18590): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 22 03:50:47 root maldet(18590): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 22 03:50:47 root maldet(18590): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 22 03:50:50 root maldet(18590): {scan} file list completed in 3s, found 142 files... Nov 22 03:50:50 root maldet(18590): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 22 03:50:50 root maldet(18590): {scan} scan of (142 files) in progress... Nov 22 03:50:59 root maldet(18590): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/vendor/.648ece6f.ico Nov 22 03:50:59 root maldet(18590): {quar} malware quarantined from '/home/sssminfotech/public_html/vendor/.648ece6f.ico' to '/usr/local/maldetect/quarantine/.648ece6f.ico.92727185' Nov 22 03:50:59 root maldet(18590): {scan} scan completed on : files 142, malware hits 1, cleaned hits 0, time 12s Nov 22 03:50:59 root maldet(18590): {scan} scan report saved, to view run: maldet --report 211122-0350.18590 Nov 23 03:17:19 root maldet(24846): {update} checking for available updates... Nov 23 03:17:19 root maldet(24846): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 23 03:17:19 root maldet(24846): {update} hashing install files and checking against server... Nov 23 03:17:20 root maldet(24846): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 23 03:17:20 root maldet(24846): {update} latest version already installed. Nov 23 03:17:20 root maldet(24989): {sigup} performing signature update check... Nov 23 03:17:20 root maldet(24989): {sigup} local signature set is version 202111192199620 Nov 23 03:17:21 root maldet(24989): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 23 03:17:21 root maldet(24989): {sigup} new signature set 202111222873613 available Nov 23 03:17:21 root maldet(24989): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 23 03:17:22 root maldet(24989): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 23 03:17:23 root maldet(24989): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 23 03:17:23 root maldet(24989): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 23 03:17:23 root maldet(24989): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 23 03:17:24 root maldet(24989): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 23 03:17:24 root maldet(24989): {sigup} verified md5sum of maldet-sigpack.tgz Nov 23 03:17:24 root maldet(24989): {sigup} unpacked and installed maldet-sigpack.tgz Nov 23 03:17:24 root maldet(24989): {sigup} verified md5sum of maldet-clean.tgz Nov 23 03:17:24 root maldet(24989): {sigup} unpacked and installed maldet-clean.tgz Nov 23 03:17:24 root maldet(24989): {sigup} signature set update completed Nov 23 03:17:24 root maldet(24989): {sigup} 17258 signatures (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 23 03:17:24 root maldet(25266): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 23 03:17:38 root maldet(25266): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 23 03:17:38 root maldet(25266): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 23 03:17:38 root maldet(25266): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 23 03:17:38 root maldet(25266): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 23 03:17:40 root maldet(25266): {scan} file list completed in 2s, found 143 files... Nov 23 03:17:40 root maldet(25266): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 23 03:17:40 root maldet(25266): {scan} scan of (143 files) in progress... Nov 23 03:18:02 root maldet(25266): {scan} scan completed on : files 143, malware hits 0, cleaned hits 0, time 38s Nov 23 03:18:02 root maldet(25266): {scan} scan report saved, to view run: maldet --report 211123-0317.25266 Nov 24 03:31:24 root maldet(19990): {update} checking for available updates... Nov 24 03:31:25 root maldet(19990): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 24 03:31:25 root maldet(19990): {update} hashing install files and checking against server... Nov 24 03:31:25 root maldet(19990): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 24 03:31:26 root maldet(19990): {update} latest version already installed. Nov 24 03:31:26 root maldet(20153): {sigup} performing signature update check... Nov 24 03:31:26 root maldet(20153): {sigup} local signature set is version 202111222873613 Nov 24 03:31:26 root maldet(20153): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 24 03:31:26 root maldet(20153): {sigup} latest signature set already installed Nov 24 03:31:27 root maldet(20280): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 24 03:31:27 root maldet(20280): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 24 03:31:27 root maldet(20280): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 24 03:31:27 root maldet(20280): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 24 03:31:27 root maldet(20280): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 24 03:31:29 root maldet(20280): {scan} file list completed in 2s, found 136 files... Nov 24 03:31:29 root maldet(20280): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 24 03:31:29 root maldet(20280): {scan} scan of (136 files) in progress... Nov 24 03:31:38 root maldet(20280): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/sssm_infotech/js/.a4ae5c15.ico Nov 24 03:31:38 root maldet(20280): {quar} malware quarantined from '/home/sssminfotech/public_html/sssm_infotech/js/.a4ae5c15.ico' to '/usr/local/maldetect/quarantine/.a4ae5c15.ico.452426615' Nov 24 03:31:38 root maldet(20280): {scan} scan completed on : files 136, malware hits 1, cleaned hits 0, time 11s Nov 24 03:31:38 root maldet(20280): {scan} scan report saved, to view run: maldet --report 211124-0331.20280 Nov 25 03:46:47 root maldet(25704): {update} checking for available updates... Nov 25 03:46:48 root maldet(25704): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 25 03:46:48 root maldet(25704): {update} hashing install files and checking against server... Nov 25 03:46:48 root maldet(25704): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 25 03:46:48 root maldet(25704): {update} latest version already installed. Nov 25 03:46:49 root maldet(25851): {sigup} performing signature update check... Nov 25 03:46:49 root maldet(25851): {sigup} local signature set is version 202111222873613 Nov 25 03:46:49 root maldet(25851): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 25 03:46:49 root maldet(25851): {sigup} latest signature set already installed Nov 25 03:46:49 root maldet(25963): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 25 03:46:50 root maldet(25963): {scan} signatures loaded: 17258 (14436 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 25 03:46:50 root maldet(25963): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 25 03:46:50 root maldet(25963): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 25 03:46:50 root maldet(25963): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 25 03:46:53 root maldet(25963): {scan} file list completed in 3s, found 197 files... Nov 25 03:46:53 root maldet(25963): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 25 03:46:53 root maldet(25963): {scan} scan of (197 files) in progress... Nov 25 03:47:03 root maldet(25963): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/sssm_infotech/vendor/fontawesome/.c668f11f.ico Nov 25 03:47:03 root maldet(25963): {quar} malware quarantined from '/home/sssminfotech/public_html/sssm_infotech/vendor/fontawesome/.c668f11f.ico' to '/usr/local/maldetect/quarantine/.c668f11f.ico.2211913581' Nov 25 03:47:03 root maldet(25963): {scan} scan completed on : files 197, malware hits 1, cleaned hits 0, time 14s Nov 25 03:47:03 root maldet(25963): {scan} scan report saved, to view run: maldet --report 211125-0346.25963 Nov 26 03:42:25 root maldet(432): {update} checking for available updates... Nov 26 03:42:26 root maldet(432): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 26 03:42:26 root maldet(432): {update} hashing install files and checking against server... Nov 26 03:42:27 root maldet(432): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 26 03:42:27 root maldet(432): {update} latest version already installed. Nov 26 03:42:27 root maldet(579): {sigup} performing signature update check... Nov 26 03:42:27 root maldet(579): {sigup} local signature set is version 202111222873613 Nov 26 03:42:28 root maldet(579): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 26 03:42:28 root maldet(579): {sigup} new signature set 202111253553092 available Nov 26 03:42:28 root maldet(579): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 26 03:42:29 root maldet(579): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 26 03:42:29 root maldet(579): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 26 03:42:29 root maldet(579): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 26 03:42:29 root maldet(579): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 26 03:42:30 root maldet(579): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 26 03:42:30 root maldet(579): {sigup} verified md5sum of maldet-sigpack.tgz Nov 26 03:42:30 root maldet(579): {sigup} unpacked and installed maldet-sigpack.tgz Nov 26 03:42:30 root maldet(579): {sigup} verified md5sum of maldet-clean.tgz Nov 26 03:42:30 root maldet(579): {sigup} unpacked and installed maldet-clean.tgz Nov 26 03:42:30 root maldet(579): {sigup} signature set update completed Nov 26 03:42:30 root maldet(579): {sigup} 17259 signatures (14437 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 26 03:42:30 root maldet(879): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 26 03:42:45 root maldet(879): {scan} signatures loaded: 17259 (14437 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 26 03:42:45 root maldet(879): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 26 03:42:45 root maldet(879): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 26 03:42:45 root maldet(879): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 26 03:42:47 root maldet(879): {scan} file list completed in 2s, found 123 files... Nov 26 03:42:47 root maldet(879): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 26 03:42:47 root maldet(879): {scan} scan of (123 files) in progress... Nov 26 03:43:06 root maldet(879): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/7ai8xa/cache/.5c831391.ico Nov 26 03:43:06 root maldet(879): {quar} malware quarantined from '/home/sssminfotech/public_html/7ai8xa/cache/.5c831391.ico' to '/usr/local/maldetect/quarantine/.5c831391.ico.2712217178' Nov 26 03:43:06 root maldet(879): {scan} scan completed on : files 123, malware hits 1, cleaned hits 0, time 36s Nov 26 03:43:06 root maldet(879): {scan} scan report saved, to view run: maldet --report 211126-0342.879 Nov 27 03:52:53 root maldet(25007): {update} checking for available updates... Nov 27 03:52:53 root maldet(25007): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 27 03:52:53 root maldet(25007): {update} hashing install files and checking against server... Nov 27 03:52:54 root maldet(25007): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 27 03:52:54 root maldet(25007): {update} latest version already installed. Nov 27 03:52:54 root maldet(25153): {sigup} performing signature update check... Nov 27 03:52:54 root maldet(25153): {sigup} local signature set is version 202111253553092 Nov 27 03:52:54 root maldet(25153): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 27 03:52:54 root maldet(25153): {sigup} latest signature set already installed Nov 27 03:52:55 root maldet(25318): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 27 03:52:55 root maldet(25318): {scan} signatures loaded: 17259 (14437 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 27 03:52:55 root maldet(25318): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 27 03:52:55 root maldet(25318): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 27 03:52:55 root maldet(25318): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 27 03:52:57 root maldet(25318): {scan} file list completed in 2s, found 238 files... Nov 27 03:52:57 root maldet(25318): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 27 03:52:57 root maldet(25318): {scan} scan of (238 files) in progress... Nov 27 03:53:11 root maldet(25318): {scan} scan completed on : files 238, malware hits 0, cleaned hits 0, time 16s Nov 27 03:53:11 root maldet(25318): {scan} scan report saved, to view run: maldet --report 211127-0352.25318 Nov 28 03:29:15 root maldet(23935): {update} checking for available updates... Nov 28 03:29:16 root maldet(23935): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 28 03:29:16 root maldet(23935): {update} hashing install files and checking against server... Nov 28 03:29:16 root maldet(23935): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 28 03:29:16 root maldet(23935): {update} latest version already installed. Nov 28 03:29:16 root maldet(24107): {sigup} performing signature update check... Nov 28 03:29:16 root maldet(24107): {sigup} local signature set is version 202111253553092 Nov 28 03:29:17 root maldet(24107): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 28 03:29:17 root maldet(24107): {sigup} latest signature set already installed Nov 28 03:29:17 root maldet(24289): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 28 03:29:17 root maldet(24289): {scan} signatures loaded: 17259 (14437 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 28 03:29:17 root maldet(24289): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 28 03:29:17 root maldet(24289): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 28 03:29:17 root maldet(24289): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 28 03:29:20 root maldet(24289): {scan} file list completed in 3s, found 146 files... Nov 28 03:29:20 root maldet(24289): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 28 03:29:20 root maldet(24289): {scan} scan of (146 files) in progress... Nov 28 03:29:31 root maldet(24289): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/js/.497c86db.ico Nov 28 03:29:31 root maldet(24289): {quar} malware quarantined from '/home/sssminfotech/public_html/js/.497c86db.ico' to '/usr/local/maldetect/quarantine/.497c86db.ico.117073585' Nov 28 03:29:31 root maldet(24289): {scan} scan completed on : files 146, malware hits 1, cleaned hits 0, time 14s Nov 28 03:29:31 root maldet(24289): {scan} scan report saved, to view run: maldet --report 211128-0329.24289 Nov 29 03:45:02 root maldet(27109): {update} checking for available updates... Nov 29 03:45:02 root maldet(27109): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 29 03:45:02 root maldet(27109): {update} hashing install files and checking against server... Nov 29 03:45:03 root maldet(27109): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 29 03:45:03 root maldet(27109): {update} latest version already installed. Nov 29 03:45:03 root maldet(27320): {sigup} performing signature update check... Nov 29 03:45:03 root maldet(27320): {sigup} local signature set is version 202111253553092 Nov 29 03:45:03 root maldet(27320): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 29 03:45:03 root maldet(27320): {sigup} new signature set 2021112851507 available Nov 29 03:45:03 root maldet(27320): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 29 03:45:04 root maldet(27320): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 29 03:45:06 root maldet(27320): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 29 03:45:06 root maldet(27320): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 29 03:45:06 root maldet(27320): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 29 03:45:07 root maldet(27320): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 29 03:45:07 root maldet(27320): {sigup} verified md5sum of maldet-sigpack.tgz Nov 29 03:45:07 root maldet(27320): {sigup} unpacked and installed maldet-sigpack.tgz Nov 29 03:45:07 root maldet(27320): {sigup} verified md5sum of maldet-clean.tgz Nov 29 03:45:07 root maldet(27320): {sigup} unpacked and installed maldet-clean.tgz Nov 29 03:45:07 root maldet(27320): {sigup} signature set update completed Nov 29 03:45:07 root maldet(27320): {sigup} 17259 signatures (14437 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 29 03:45:07 root maldet(27720): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 29 03:45:19 root maldet(27720): {scan} signatures loaded: 17259 (14437 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 29 03:45:19 root maldet(27720): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 29 03:45:19 root maldet(27720): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 29 03:45:19 root maldet(27720): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 29 03:45:22 root maldet(27720): {scan} file list completed in 3s, found 155 files... Nov 29 03:45:22 root maldet(27720): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 29 03:45:22 root maldet(27720): {scan} scan of (155 files) in progress... Nov 29 03:45:44 root maldet(27720): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/vendor/fontawesome/fonts/.1b628593.ico Nov 29 03:45:44 root maldet(27720): {quar} malware quarantined from '/home/sssminfotech/public_html/vendor/fontawesome/fonts/.1b628593.ico' to '/usr/local/maldetect/quarantine/.1b628593.ico.46668920' Nov 29 03:45:44 root maldet(27720): {scan} scan completed on : files 155, malware hits 1, cleaned hits 0, time 37s Nov 29 03:45:44 root maldet(27720): {scan} scan report saved, to view run: maldet --report 211129-0345.27720 Nov 30 03:41:23 root maldet(5709): {update} checking for available updates... Nov 30 03:41:24 root maldet(5709): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 30 03:41:24 root maldet(5709): {update} hashing install files and checking against server... Nov 30 03:41:24 root maldet(5709): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 30 03:41:24 root maldet(5709): {update} latest version already installed. Nov 30 03:41:24 root maldet(5846): {sigup} performing signature update check... Nov 30 03:41:24 root maldet(5846): {sigup} local signature set is version 2021112851507 Nov 30 03:41:25 root maldet(5846): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 30 03:41:25 root maldet(5846): {sigup} latest signature set already installed Nov 30 03:41:25 root maldet(5958): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 30 03:41:25 root maldet(5958): {scan} signatures loaded: 17259 (14437 MD5 | 2039 HEX | 783 YARA | 0 USER) Nov 30 03:41:26 root maldet(5958): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 30 03:41:26 root maldet(5958): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 30 03:41:26 root maldet(5958): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 30 03:41:28 root maldet(5958): {scan} file list completed in 2s, found 194 files... Nov 30 03:41:28 root maldet(5958): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 30 03:41:28 root maldet(5958): {scan} scan of (194 files) in progress... Nov 30 03:41:37 root maldet(5958): {scan} scan completed on : files 194, malware hits 0, cleaned hits 0, time 12s Nov 30 03:41:37 root maldet(5958): {scan} scan report saved, to view run: maldet --report 211130-0341.5958 Dec 01 03:39:23 root maldet(2745): {update} checking for available updates... Dec 01 03:39:24 root maldet(2745): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 01 03:39:24 root maldet(2745): {update} hashing install files and checking against server... Dec 01 03:39:24 root maldet(2745): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 01 03:39:24 root maldet(2745): {update} latest version already installed. Dec 01 03:39:24 root maldet(2881): {sigup} performing signature update check... Dec 01 03:39:24 root maldet(2881): {sigup} local signature set is version 2021112851507 Dec 01 03:39:25 root maldet(2881): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 01 03:39:25 root maldet(2881): {sigup} latest signature set already installed Dec 01 03:39:25 root maldet(2994): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 01 03:39:27 root maldet(2994): {scan} signatures loaded: 17259 (14437 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 01 03:39:27 root maldet(2994): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 01 03:39:27 root maldet(2994): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 01 03:39:27 root maldet(2994): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 01 03:55:56 root maldet(2994): {scan} file list completed in 989s, found 1706 files... Dec 01 03:55:56 root maldet(2994): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 01 03:55:56 root maldet(2994): {scan} scan of (1706 files) in progress... Dec 01 03:57:45 root maldet(2994): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/img/.1347dba2.ico Dec 01 03:57:45 root maldet(2994): {quar} malware quarantined from '/home/sssminfotech/public_html/img/.1347dba2.ico' to '/usr/local/maldetect/quarantine/.1347dba2.ico.2338125079' Dec 01 03:57:45 root maldet(2994): {scan} scan completed on : files 1706, malware hits 1, cleaned hits 0, time 1100s Dec 01 03:57:45 root maldet(2994): {scan} scan report saved, to view run: maldet --report 211201-0339.2994 Dec 02 03:44:00 root maldet(6073): {update} checking for available updates... Dec 02 03:44:00 root maldet(6073): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 02 03:44:00 root maldet(6073): {update} hashing install files and checking against server... Dec 02 03:44:01 root maldet(6073): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 02 03:44:01 root maldet(6073): {update} latest version already installed. Dec 02 03:44:01 root maldet(6220): {sigup} performing signature update check... Dec 02 03:44:01 root maldet(6220): {sigup} local signature set is version 2021112851507 Dec 02 03:44:02 root maldet(6220): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 02 03:44:02 root maldet(6220): {sigup} new signature set 20211201725955 available Dec 02 03:44:02 root maldet(6220): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 02 03:44:03 root maldet(6220): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 02 03:44:03 root maldet(6220): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 02 03:44:03 root maldet(6220): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 02 03:44:03 root maldet(6220): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 02 03:44:04 root maldet(6220): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 02 03:44:04 root maldet(6220): {sigup} verified md5sum of maldet-sigpack.tgz Dec 02 03:44:04 root maldet(6220): {sigup} unpacked and installed maldet-sigpack.tgz Dec 02 03:44:04 root maldet(6220): {sigup} verified md5sum of maldet-clean.tgz Dec 02 03:44:04 root maldet(6220): {sigup} unpacked and installed maldet-clean.tgz Dec 02 03:44:04 root maldet(6220): {sigup} signature set update completed Dec 02 03:44:04 root maldet(6220): {sigup} 17261 signatures (14439 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 02 03:44:04 root maldet(6462): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 02 03:44:18 root maldet(6462): {scan} signatures loaded: 17261 (14439 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 02 03:44:18 root maldet(6462): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 02 03:44:18 root maldet(6462): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 02 03:44:18 root maldet(6462): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 02 03:44:21 root maldet(6462): {scan} file list completed in 3s, found 148 files... Dec 02 03:44:21 root maldet(6462): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 02 03:44:21 root maldet(6462): {scan} scan of (148 files) in progress... Dec 02 03:44:42 root maldet(6462): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/.well-known/pki-validation/.e62ca4d0.ico Dec 02 03:44:42 root maldet(6462): {quar} malware quarantined from '/home/sssminfotech/public_html/.well-known/pki-validation/.e62ca4d0.ico' to '/usr/local/maldetect/quarantine/.e62ca4d0.ico.2215328803' Dec 02 03:44:42 root maldet(6462): {scan} scan completed on : files 148, malware hits 1, cleaned hits 0, time 38s Dec 02 03:44:42 root maldet(6462): {scan} scan report saved, to view run: maldet --report 211202-0344.6462 Dec 03 03:26:13 root maldet(26777): {update} checking for available updates... Dec 03 03:26:14 root maldet(26777): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 03 03:26:14 root maldet(26777): {update} hashing install files and checking against server... Dec 03 03:26:14 root maldet(26777): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 03 03:26:14 root maldet(26777): {update} latest version already installed. Dec 03 03:26:14 root maldet(26921): {sigup} performing signature update check... Dec 03 03:26:15 root maldet(26921): {sigup} local signature set is version 20211201725955 Dec 03 03:26:15 root maldet(26921): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 03 03:26:15 root maldet(26921): {sigup} latest signature set already installed Dec 03 03:26:15 root maldet(27033): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 03 03:26:15 root maldet(27033): {scan} signatures loaded: 17261 (14439 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 03 03:26:15 root maldet(27033): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 03 03:26:15 root maldet(27033): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 03 03:26:15 root maldet(27033): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 03 03:26:18 root maldet(27033): {scan} file list completed in 3s, found 264 files... Dec 03 03:26:18 root maldet(27033): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 03 03:26:18 root maldet(27033): {scan} scan of (264 files) in progress... Dec 03 03:26:52 root maldet(27033): {scan} scan completed on : files 264, malware hits 0, cleaned hits 0, time 36s Dec 03 03:26:52 root maldet(27033): {scan} scan report saved, to view run: maldet --report 211203-0326.27033 Dec 04 03:44:41 root maldet(7729): {update} checking for available updates... Dec 04 03:44:42 root maldet(7729): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 04 03:44:42 root maldet(7729): {update} hashing install files and checking against server... Dec 04 03:44:42 root maldet(7729): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 04 03:44:42 root maldet(7729): {update} latest version already installed. Dec 04 03:44:42 root maldet(7963): {sigup} performing signature update check... Dec 04 03:44:42 root maldet(7963): {sigup} local signature set is version 20211201725955 Dec 04 03:44:43 root maldet(7963): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 04 03:44:43 root maldet(7963): {sigup} latest signature set already installed Dec 04 03:44:43 root maldet(8120): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 04 03:44:43 root maldet(8120): {scan} signatures loaded: 17261 (14439 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 04 03:44:43 root maldet(8120): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 04 03:44:43 root maldet(8120): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 04 03:44:43 root maldet(8120): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 04 03:44:50 root maldet(8120): {scan} file list completed in 7s, found 146 files... Dec 04 03:44:50 root maldet(8120): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 04 03:44:50 root maldet(8120): {scan} scan of (146 files) in progress... Dec 04 03:45:00 root maldet(8120): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/vendor/rs-plugin/css/.4514666d.ico Dec 04 03:45:00 root maldet(8120): {quar} malware quarantined from '/home/sssminfotech/public_html/vendor/rs-plugin/css/.4514666d.ico' to '/usr/local/maldetect/quarantine/.4514666d.ico.171287846' Dec 04 03:45:00 root maldet(8120): {scan} scan completed on : files 146, malware hits 1, cleaned hits 0, time 17s Dec 04 03:45:00 root maldet(8120): {scan} scan report saved, to view run: maldet --report 211204-0344.8120 Dec 05 03:44:47 root maldet(30782): {update} checking for available updates... Dec 05 03:44:47 root maldet(30782): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 05 03:44:47 root maldet(30782): {update} hashing install files and checking against server... Dec 05 03:44:48 root maldet(30782): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 05 03:44:48 root maldet(30782): {update} latest version already installed. Dec 05 03:44:48 root maldet(30919): {sigup} performing signature update check... Dec 05 03:44:48 root maldet(30919): {sigup} local signature set is version 20211201725955 Dec 05 03:44:48 root maldet(30919): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 05 03:44:49 root maldet(30919): {sigup} new signature set 202112041420237 available Dec 05 03:44:49 root maldet(30919): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 05 03:44:50 root maldet(30919): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 05 03:44:50 root maldet(30919): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 05 03:44:50 root maldet(30919): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 05 03:44:50 root maldet(30919): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 05 03:44:51 root maldet(30919): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 05 03:44:51 root maldet(30919): {sigup} verified md5sum of maldet-sigpack.tgz Dec 05 03:44:51 root maldet(30919): {sigup} unpacked and installed maldet-sigpack.tgz Dec 05 03:44:51 root maldet(30919): {sigup} verified md5sum of maldet-clean.tgz Dec 05 03:44:51 root maldet(30919): {sigup} unpacked and installed maldet-clean.tgz Dec 05 03:44:51 root maldet(30919): {sigup} signature set update completed Dec 05 03:44:51 root maldet(30919): {sigup} 17261 signatures (14439 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 05 03:44:51 root maldet(31167): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 05 03:45:05 root maldet(31167): {scan} signatures loaded: 17261 (14439 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 05 03:45:05 root maldet(31167): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 05 03:45:05 root maldet(31167): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 05 03:45:05 root maldet(31167): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 05 03:57:18 root maldet(31167): {scan} file list completed in 733s, found 226 files... Dec 05 03:57:18 root maldet(31167): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 05 03:57:18 root maldet(31167): {scan} scan of (226 files) in progress... Dec 05 03:58:20 root maldet(31167): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/adgnia/cache/.821f1e0d.ico Dec 05 03:58:20 root maldet(31167): {quar} malware quarantined from '/home/sssminfotech/public_html/adgnia/cache/.821f1e0d.ico' to '/usr/local/maldetect/quarantine/.821f1e0d.ico.1554222657' Dec 05 03:58:20 root maldet(31167): {scan} scan completed on : files 226, malware hits 1, cleaned hits 0, time 809s Dec 05 03:58:20 root maldet(31167): {scan} scan report saved, to view run: maldet --report 211205-0344.31167 Dec 06 03:12:06 root maldet(25656): {update} checking for available updates... Dec 06 03:12:07 root maldet(25656): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 06 03:12:07 root maldet(25656): {update} hashing install files and checking against server... Dec 06 03:12:08 root maldet(25656): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 06 03:12:08 root maldet(25656): {update} latest version already installed. Dec 06 03:12:08 root maldet(25807): {sigup} performing signature update check... Dec 06 03:12:08 root maldet(25807): {sigup} local signature set is version 202112041420237 Dec 06 03:12:09 root maldet(25807): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 06 03:12:09 root maldet(25807): {sigup} latest signature set already installed Dec 06 03:12:09 root maldet(25925): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 06 03:12:10 root maldet(25925): {scan} signatures loaded: 17261 (14439 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 06 03:12:10 root maldet(25925): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 06 03:12:10 root maldet(25925): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 06 03:12:10 root maldet(25925): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 06 03:12:13 root maldet(25925): {scan} file list completed in 3s, found 174 files... Dec 06 03:12:13 root maldet(25925): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 06 03:12:13 root maldet(25925): {scan} scan of (174 files) in progress... Dec 06 03:12:26 root maldet(25925): {scan} scan completed on : files 174, malware hits 0, cleaned hits 0, time 17s Dec 06 03:12:26 root maldet(25925): {scan} scan report saved, to view run: maldet --report 211206-0312.25925 Dec 07 03:18:07 root maldet(31613): {update} checking for available updates... Dec 07 03:18:08 root maldet(31613): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 07 03:18:08 root maldet(31613): {update} hashing install files and checking against server... Dec 07 03:18:09 root maldet(31613): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 07 03:18:09 root maldet(31613): {update} latest version already installed. Dec 07 03:18:09 root maldet(31767): {sigup} performing signature update check... Dec 07 03:18:09 root maldet(31767): {sigup} local signature set is version 202112041420237 Dec 07 03:18:09 root maldet(31767): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 07 03:18:09 root maldet(31767): {sigup} latest signature set already installed Dec 07 03:18:09 root maldet(31892): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 07 03:18:10 root maldet(31892): {scan} signatures loaded: 17261 (14439 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 07 03:18:10 root maldet(31892): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 07 03:18:10 root maldet(31892): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 07 03:18:10 root maldet(31892): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 07 03:18:12 root maldet(31892): {scan} file list completed in 2s, found 283 files... Dec 07 03:18:12 root maldet(31892): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 07 03:18:12 root maldet(31892): {scan} scan of (283 files) in progress... Dec 07 03:18:26 root maldet(31892): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/7ai8xa/.bfc003c3.ico Dec 07 03:18:26 root maldet(31892): {quar} malware quarantined from '/home/sssminfotech/public_html/7ai8xa/.bfc003c3.ico' to '/usr/local/maldetect/quarantine/.bfc003c3.ico.2994912410' Dec 07 03:18:26 root maldet(31892): {scan} scan completed on : files 283, malware hits 1, cleaned hits 0, time 17s Dec 07 03:18:26 root maldet(31892): {scan} scan report saved, to view run: maldet --report 211207-0318.31892 Dec 08 03:29:20 root maldet(5230): {update} checking for available updates... Dec 08 03:29:20 root maldet(5230): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 08 03:29:20 root maldet(5230): {update} hashing install files and checking against server... Dec 08 03:29:21 root maldet(5230): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 08 03:29:21 root maldet(5230): {update} latest version already installed. Dec 08 03:29:21 root maldet(5392): {sigup} performing signature update check... Dec 08 03:29:21 root maldet(5392): {sigup} local signature set is version 202112041420237 Dec 08 03:29:22 root maldet(5392): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 08 03:29:22 root maldet(5392): {sigup} new signature set 202112072094296 available Dec 08 03:29:22 root maldet(5392): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 08 03:29:23 root maldet(5392): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 08 03:29:23 root maldet(5392): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 08 03:29:23 root maldet(5392): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 08 03:29:24 root maldet(5392): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 08 03:29:24 root maldet(5392): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 08 03:29:24 root maldet(5392): {sigup} verified md5sum of maldet-sigpack.tgz Dec 08 03:29:28 root maldet(5392): {sigup} unpacked and installed maldet-sigpack.tgz Dec 08 03:29:29 root maldet(5392): {sigup} verified md5sum of maldet-clean.tgz Dec 08 03:29:29 root maldet(5392): {sigup} unpacked and installed maldet-clean.tgz Dec 08 03:29:29 root maldet(5392): {sigup} signature set update completed Dec 08 03:29:29 root maldet(5392): {sigup} 17261 signatures (14439 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 08 03:29:30 root maldet(5675): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 08 03:29:47 root maldet(5675): {scan} signatures loaded: 17261 (14439 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 08 03:29:47 root maldet(5675): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 08 03:29:47 root maldet(5675): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 08 03:29:47 root maldet(5675): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 08 03:41:30 root maldet(5675): {scan} file list completed in 703s, found 8237 files... Dec 08 03:41:30 root maldet(5675): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 08 03:41:30 root maldet(5675): {scan} scan of (8237 files) in progress... Dec 08 03:45:24 root maldet(5675): {scan} scan completed on : files 8237, malware hits 0, cleaned hits 0, time 954s Dec 08 03:45:24 root maldet(5675): {scan} scan report saved, to view run: maldet --report 211208-0329.5675 Dec 09 03:14:28 root maldet(28232): {update} checking for available updates... Dec 09 03:14:29 root maldet(28232): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 09 03:14:29 root maldet(28232): {update} hashing install files and checking against server... Dec 09 03:14:29 root maldet(28232): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 09 03:14:29 root maldet(28232): {update} latest version already installed. Dec 09 03:14:30 root maldet(28377): {sigup} performing signature update check... Dec 09 03:14:30 root maldet(28377): {sigup} local signature set is version 202112072094296 Dec 09 03:14:30 root maldet(28377): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 09 03:14:30 root maldet(28377): {sigup} latest signature set already installed Dec 09 03:14:30 root maldet(28493): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 09 03:14:31 root maldet(28493): {scan} signatures loaded: 17261 (14439 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 09 03:14:31 root maldet(28493): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 09 03:14:31 root maldet(28493): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 09 03:14:31 root maldet(28493): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 09 03:14:34 root maldet(28493): {scan} file list completed in 3s, found 1110 files... Dec 09 03:14:34 root maldet(28493): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 09 03:14:34 root maldet(28493): {scan} scan of (1110 files) in progress... Dec 09 03:15:00 root maldet(28493): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/sssminfotech/public_html/adpymou/.63c45070.ico Dec 09 03:15:00 root maldet(28493): {quar} malware quarantined from '/home/sssminfotech/public_html/adpymou/.63c45070.ico' to '/usr/local/maldetect/quarantine/.63c45070.ico.1066915703' Dec 09 03:15:00 root maldet(28493): {scan} scan completed on : files 1110, malware hits 1, cleaned hits 0, time 30s Dec 09 03:15:00 root maldet(28493): {scan} scan report saved, to view run: maldet --report 211209-0314.28493 Dec 10 03:37:17 root maldet(24508): {update} checking for available updates... Dec 10 03:37:17 root maldet(24508): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 10 03:37:17 root maldet(24508): {update} hashing install files and checking against server... Dec 10 03:37:18 root maldet(24508): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 10 03:37:18 root maldet(24508): {update} latest version already installed. Dec 10 03:37:18 root maldet(24653): {sigup} performing signature update check... Dec 10 03:37:18 root maldet(24653): {sigup} local signature set is version 202112072094296 Dec 10 03:37:19 root maldet(24653): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 10 03:37:19 root maldet(24653): {sigup} latest signature set already installed Dec 10 03:37:19 root maldet(24769): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 10 03:37:19 root maldet(24769): {scan} signatures loaded: 17261 (14439 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 10 03:37:19 root maldet(24769): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 10 03:37:19 root maldet(24769): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 10 03:37:19 root maldet(24769): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 10 03:37:21 root maldet(24769): {scan} file list completed in 2s, found 294 files... Dec 10 03:37:21 root maldet(24769): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 10 03:37:21 root maldet(24769): {scan} scan of (294 files) in progress... Dec 10 03:37:34 root maldet(24769): {scan} scan completed on : files 294, malware hits 0, cleaned hits 0, time 15s Dec 10 03:37:34 root maldet(24769): {scan} scan report saved, to view run: maldet --report 211210-0337.24769 Dec 11 03:49:56 root maldet(3536): {update} checking for available updates... Dec 11 03:49:57 root maldet(3536): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 11 03:49:57 root maldet(3536): {update} hashing install files and checking against server... Dec 11 03:49:58 root maldet(3536): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 11 03:49:58 root maldet(3536): {update} latest version already installed. Dec 11 03:49:58 root maldet(3671): {sigup} performing signature update check... Dec 11 03:49:58 root maldet(3671): {sigup} local signature set is version 202112072094296 Dec 11 03:49:58 root maldet(3671): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 11 03:49:58 root maldet(3671): {sigup} new signature set 202112102784182 available Dec 11 03:49:58 root maldet(3671): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 11 03:49:59 root maldet(3671): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 11 03:50:00 root maldet(3671): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 11 03:50:00 root maldet(3671): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 11 03:50:00 root maldet(3671): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 11 03:50:01 root maldet(3671): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 11 03:50:01 root maldet(3671): {sigup} verified md5sum of maldet-sigpack.tgz Dec 11 03:50:02 root maldet(3671): {sigup} unpacked and installed maldet-sigpack.tgz Dec 11 03:50:02 root maldet(3671): {sigup} verified md5sum of maldet-clean.tgz Dec 11 03:50:02 root maldet(3671): {sigup} unpacked and installed maldet-clean.tgz Dec 11 03:50:02 root maldet(3671): {sigup} signature set update completed Dec 11 03:50:02 root maldet(3671): {sigup} 17261 signatures (14439 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 11 03:50:02 root maldet(4318): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 11 03:50:15 root maldet(4318): {scan} signatures loaded: 17261 (14439 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 11 03:50:15 root maldet(4318): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 11 03:50:15 root maldet(4318): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 11 03:50:15 root maldet(4318): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 11 03:50:18 root maldet(4318): {scan} file list completed in 3s, found 106 files... Dec 11 03:50:18 root maldet(4318): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 11 03:50:18 root maldet(4318): {scan} scan of (106 files) in progress... Dec 11 03:50:37 root maldet(4318): {scan} scan completed on : files 106, malware hits 0, cleaned hits 0, time 35s Dec 11 03:50:37 root maldet(4318): {scan} scan report saved, to view run: maldet --report 211211-0350.4318 Dec 12 03:34:37 root maldet(11574): {update} checking for available updates... Dec 12 03:34:37 root maldet(11574): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 12 03:34:37 root maldet(11574): {update} hashing install files and checking against server... Dec 12 03:34:38 root maldet(11574): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 12 03:34:38 root maldet(11574): {update} latest version already installed. Dec 12 03:34:39 root maldet(11708): {sigup} performing signature update check... Dec 12 03:34:39 root maldet(11708): {sigup} local signature set is version 202112102784182 Dec 12 03:34:40 root maldet(11708): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 12 03:34:41 root maldet(11708): {sigup} latest signature set already installed Dec 12 03:34:41 root maldet(11862): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 12 03:34:43 root maldet(11862): {scan} signatures loaded: 17261 (14439 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 12 03:34:43 root maldet(11862): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 12 03:34:43 root maldet(11862): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 12 03:34:43 root maldet(11862): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 12 03:50:52 root maldet(11862): {scan} file list completed in 969s, found 1376 files... Dec 12 03:50:52 root maldet(11862): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 12 03:50:52 root maldet(11862): {scan} scan of (1376 files) in progress... Dec 12 03:52:33 root maldet(11862): {scan} scan completed on : files 1376, malware hits 0, cleaned hits 0, time 1072s Dec 12 03:52:33 root maldet(11862): {scan} scan report saved, to view run: maldet --report 211212-0334.11862 Dec 13 03:35:40 root maldet(4793): {update} checking for available updates... Dec 13 03:35:41 root maldet(4793): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 13 03:35:41 root maldet(4793): {update} hashing install files and checking against server... Dec 13 03:35:41 root maldet(4793): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 13 03:35:41 root maldet(4793): {update} latest version already installed. Dec 13 03:35:41 root maldet(4932): {sigup} performing signature update check... Dec 13 03:35:41 root maldet(4932): {sigup} local signature set is version 202112102784182 Dec 13 03:35:42 root maldet(4932): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 13 03:35:42 root maldet(4932): {sigup} latest signature set already installed Dec 13 03:35:42 root maldet(5055): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 13 03:35:43 root maldet(5055): {scan} signatures loaded: 17261 (14439 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 13 03:35:43 root maldet(5055): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 13 03:35:43 root maldet(5055): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 13 03:35:43 root maldet(5055): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 13 03:35:45 root maldet(5055): {scan} file list completed in 2s, found 103 files... Dec 13 03:35:45 root maldet(5055): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 13 03:35:45 root maldet(5055): {scan} scan of (103 files) in progress... Dec 13 03:36:00 root maldet(5055): {scan} scan completed on : files 103, malware hits 0, cleaned hits 0, time 18s Dec 13 03:36:00 root maldet(5055): {scan} scan report saved, to view run: maldet --report 211213-0335.5055 Dec 14 03:25:45 root maldet(26530): {update} checking for available updates... Dec 14 03:25:45 root maldet(26530): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 14 03:25:45 root maldet(26530): {update} hashing install files and checking against server... Dec 14 03:25:46 root maldet(26530): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 14 03:25:46 root maldet(26530): {update} latest version already installed. Dec 14 03:25:46 root maldet(26666): {sigup} performing signature update check... Dec 14 03:25:46 root maldet(26666): {sigup} local signature set is version 202112102784182 Dec 14 03:25:46 root maldet(26666): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 14 03:25:46 root maldet(26666): {sigup} new signature set 202112133458268 available Dec 14 03:25:46 root maldet(26666): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 14 03:25:47 root maldet(26666): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 14 03:25:48 root maldet(26666): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 14 03:25:48 root maldet(26666): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 14 03:25:48 root maldet(26666): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 14 03:25:49 root maldet(26666): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 14 03:25:49 root maldet(26666): {sigup} verified md5sum of maldet-sigpack.tgz Dec 14 03:25:49 root maldet(26666): {sigup} unpacked and installed maldet-sigpack.tgz Dec 14 03:25:49 root maldet(26666): {sigup} verified md5sum of maldet-clean.tgz Dec 14 03:25:49 root maldet(26666): {sigup} unpacked and installed maldet-clean.tgz Dec 14 03:25:49 root maldet(26666): {sigup} signature set update completed Dec 14 03:25:49 root maldet(26666): {sigup} 17261 signatures (14439 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 14 03:25:49 root maldet(26911): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 14 03:26:02 root maldet(26911): {scan} signatures loaded: 17261 (14439 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 14 03:26:02 root maldet(26911): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 14 03:26:02 root maldet(26911): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 14 03:26:02 root maldet(26911): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 14 03:26:04 root maldet(26911): {scan} file list completed in 2s, found 289 files... Dec 14 03:26:04 root maldet(26911): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 14 03:26:04 root maldet(26911): {scan} scan of (289 files) in progress... Dec 14 03:26:23 root maldet(26911): {scan} scan completed on : files 289, malware hits 0, cleaned hits 0, time 33s Dec 14 03:26:23 root maldet(26911): {scan} scan report saved, to view run: maldet --report 211214-0325.26911 Dec 15 03:30:49 root maldet(27571): {update} checking for available updates... Dec 15 03:30:50 root maldet(27571): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 15 03:30:50 root maldet(27571): {update} hashing install files and checking against server... Dec 15 03:30:50 root maldet(27571): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 15 03:30:50 root maldet(27571): {update} latest version already installed. Dec 15 03:30:51 root maldet(27717): {sigup} performing signature update check... Dec 15 03:30:51 root maldet(27717): {sigup} local signature set is version 202112133458268 Dec 15 03:30:52 root maldet(27717): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 15 03:30:52 root maldet(27717): {sigup} latest signature set already installed Dec 15 03:30:53 root maldet(27831): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 15 03:30:54 root maldet(27831): {scan} signatures loaded: 17261 (14439 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 15 03:30:54 root maldet(27831): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 15 03:30:54 root maldet(27831): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 15 03:30:54 root maldet(27831): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 15 03:51:11 root maldet(27831): {scan} file list completed in 1217s, found 97 files... Dec 15 03:51:11 root maldet(27831): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 15 03:51:11 root maldet(27831): {scan} scan of (97 files) in progress... Dec 15 03:51:56 root maldet(27831): {scan} scan completed on : files 97, malware hits 0, cleaned hits 0, time 1263s Dec 15 03:51:56 root maldet(27831): {scan} scan report saved, to view run: maldet --report 211215-0330.27831 Dec 16 03:48:44 root maldet(1236): {update} checking for available updates... Dec 16 03:48:45 root maldet(1236): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 16 03:48:45 root maldet(1236): {update} hashing install files and checking against server... Dec 16 03:48:45 root maldet(1236): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 16 03:48:45 root maldet(1236): {update} latest version already installed. Dec 16 03:48:45 root maldet(1376): {sigup} performing signature update check... Dec 16 03:48:45 root maldet(1376): {sigup} local signature set is version 202112133458268 Dec 16 03:48:46 root maldet(1376): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 16 03:48:46 root maldet(1376): {sigup} latest signature set already installed Dec 16 03:48:46 root maldet(1487): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 16 03:48:47 root maldet(1487): {scan} signatures loaded: 17261 (14439 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 16 03:48:47 root maldet(1487): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 16 03:48:47 root maldet(1487): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 16 03:48:47 root maldet(1487): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 16 03:48:50 root maldet(1487): {scan} file list completed in 3s, found 96 files... Dec 16 03:48:50 root maldet(1487): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 16 03:48:50 root maldet(1487): {scan} scan of (96 files) in progress... Dec 16 03:49:04 root maldet(1487): {scan} scan completed on : files 96, malware hits 0, cleaned hits 0, time 18s Dec 16 03:49:04 root maldet(1487): {scan} scan report saved, to view run: maldet --report 211216-0348.1487 Dec 17 03:23:08 root maldet(5890): {update} checking for available updates... Dec 17 03:23:08 root maldet(5890): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 17 03:23:08 root maldet(5890): {update} hashing install files and checking against server... Dec 17 03:23:09 root maldet(5890): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 17 03:23:09 root maldet(5890): {update} latest version already installed. Dec 17 03:23:09 root maldet(6027): {sigup} performing signature update check... Dec 17 03:23:09 root maldet(6027): {sigup} local signature set is version 202112133458268 Dec 17 03:23:09 root maldet(6027): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 17 03:23:09 root maldet(6027): {sigup} new signature set 202112164133854 available Dec 17 03:23:09 root maldet(6027): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 17 03:23:10 root maldet(6027): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 17 03:23:11 root maldet(6027): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 17 03:23:11 root maldet(6027): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 17 03:23:11 root maldet(6027): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 17 03:23:12 root maldet(6027): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 17 03:23:12 root maldet(6027): {sigup} verified md5sum of maldet-sigpack.tgz Dec 17 03:23:12 root maldet(6027): {sigup} unpacked and installed maldet-sigpack.tgz Dec 17 03:23:12 root maldet(6027): {sigup} verified md5sum of maldet-clean.tgz Dec 17 03:23:12 root maldet(6027): {sigup} unpacked and installed maldet-clean.tgz Dec 17 03:23:12 root maldet(6027): {sigup} signature set update completed Dec 17 03:23:12 root maldet(6027): {sigup} 17261 signatures (14439 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 17 03:23:12 root maldet(6282): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 17 03:23:26 root maldet(6282): {scan} signatures loaded: 17261 (14439 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 17 03:23:26 root maldet(6282): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 17 03:23:26 root maldet(6282): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 17 03:23:26 root maldet(6282): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 17 03:23:28 root maldet(6282): {scan} file list completed in 2s, found 310 files... Dec 17 03:23:28 root maldet(6282): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 17 03:23:28 root maldet(6282): {scan} scan of (310 files) in progress... Dec 17 03:23:49 root maldet(6282): {scan} scan completed on : files 310, malware hits 0, cleaned hits 0, time 37s Dec 17 03:23:49 root maldet(6282): {scan} scan report saved, to view run: maldet --report 211217-0323.6282 Dec 18 03:08:27 root maldet(18697): {update} checking for available updates... Dec 18 03:08:27 root maldet(18697): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 18 03:08:27 root maldet(18697): {update} hashing install files and checking against server... Dec 18 03:08:28 root maldet(18697): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 18 03:08:28 root maldet(18697): {update} latest version already installed. Dec 18 03:08:28 root maldet(18837): {sigup} performing signature update check... Dec 18 03:08:28 root maldet(18837): {sigup} local signature set is version 202112164133854 Dec 18 03:08:29 root maldet(18837): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 18 03:08:29 root maldet(18837): {sigup} latest signature set already installed Dec 18 03:08:29 root maldet(18951): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 18 03:08:29 root maldet(18951): {scan} signatures loaded: 17261 (14439 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 18 03:08:29 root maldet(18951): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 18 03:08:29 root maldet(18951): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 18 03:08:29 root maldet(18951): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 18 03:08:32 root maldet(18951): {scan} file list completed in 3s, found 93 files... Dec 18 03:08:32 root maldet(18951): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 18 03:08:32 root maldet(18951): {scan} scan of (93 files) in progress... Dec 18 03:08:45 root maldet(18951): {scan} scan completed on : files 93, malware hits 0, cleaned hits 0, time 16s Dec 18 03:08:45 root maldet(18951): {scan} scan report saved, to view run: maldet --report 211218-0308.18951 Dec 19 03:27:47 root maldet(25065): {update} checking for available updates... Dec 19 03:27:47 root maldet(25065): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 19 03:27:47 root maldet(25065): {update} hashing install files and checking against server... Dec 19 03:27:48 root maldet(25065): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 19 03:27:48 root maldet(25065): {update} latest version already installed. Dec 19 03:27:48 root maldet(25202): {sigup} performing signature update check... Dec 19 03:27:48 root maldet(25202): {sigup} local signature set is version 202112164133854 Dec 19 03:27:49 root maldet(25202): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 19 03:27:49 root maldet(25202): {sigup} latest signature set already installed Dec 19 03:27:49 root maldet(25319): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 19 03:27:49 root maldet(25319): {scan} signatures loaded: 17261 (14439 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 19 03:27:49 root maldet(25319): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 19 03:27:49 root maldet(25319): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 19 03:27:49 root maldet(25319): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 19 03:39:12 root maldet(25319): {scan} file list completed in 683s, found 99 files... Dec 19 03:39:12 root maldet(25319): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 19 03:39:12 root maldet(25319): {scan} scan of (99 files) in progress... Dec 19 03:39:41 root maldet(25319): {scan} scan completed on : files 99, malware hits 0, cleaned hits 0, time 712s Dec 19 03:39:41 root maldet(25319): {scan} scan report saved, to view run: maldet --report 211219-0327.25319 Dec 20 03:32:02 root maldet(17686): {update} checking for available updates... Dec 20 03:32:03 root maldet(17686): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 20 03:32:03 root maldet(17686): {update} hashing install files and checking against server... Dec 20 03:32:03 root maldet(17686): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 20 03:32:03 root maldet(17686): {update} latest version already installed. Dec 20 03:32:03 root maldet(17822): {sigup} performing signature update check... Dec 20 03:32:03 root maldet(17822): {sigup} local signature set is version 202112164133854 Dec 20 03:32:04 root maldet(17822): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 20 03:32:04 root maldet(17822): {sigup} new signature set 20211219614251 available Dec 20 03:32:04 root maldet(17822): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 20 03:32:04 root maldet(17822): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 20 03:32:05 root maldet(17822): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 20 03:32:05 root maldet(17822): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 20 03:32:05 root maldet(17822): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 20 03:32:06 root maldet(17822): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 20 03:32:06 root maldet(17822): {sigup} verified md5sum of maldet-sigpack.tgz Dec 20 03:32:06 root maldet(17822): {sigup} unpacked and installed maldet-sigpack.tgz Dec 20 03:32:06 root maldet(17822): {sigup} verified md5sum of maldet-clean.tgz Dec 20 03:32:06 root maldet(17822): {sigup} unpacked and installed maldet-clean.tgz Dec 20 03:32:06 root maldet(17822): {sigup} signature set update completed Dec 20 03:32:06 root maldet(17822): {sigup} 17262 signatures (14440 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 20 03:32:06 root maldet(18066): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 20 03:32:19 root maldet(18066): {scan} signatures loaded: 17262 (14440 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 20 03:32:19 root maldet(18066): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 20 03:32:19 root maldet(18066): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 20 03:32:19 root maldet(18066): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 20 03:32:22 root maldet(18066): {scan} file list completed in 3s, found 87 files... Dec 20 03:32:22 root maldet(18066): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 20 03:32:22 root maldet(18066): {scan} scan of (87 files) in progress... Dec 20 03:32:42 root maldet(18066): {scan} scan completed on : files 87, malware hits 0, cleaned hits 0, time 35s Dec 20 03:32:42 root maldet(18066): {scan} scan report saved, to view run: maldet --report 211220-0332.18066 Dec 21 03:29:32 root maldet(32450): {update} checking for available updates... Dec 21 03:29:33 root maldet(32450): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 21 03:29:33 root maldet(32450): {update} hashing install files and checking against server... Dec 21 03:29:33 root maldet(32450): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 21 03:29:33 root maldet(32450): {update} latest version already installed. Dec 21 03:29:33 root maldet(32584): {sigup} performing signature update check... Dec 21 03:29:33 root maldet(32584): {sigup} local signature set is version 20211219614251 Dec 21 03:29:33 root maldet(32584): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 21 03:29:33 root maldet(32584): {sigup} latest signature set already installed Dec 21 03:29:33 root maldet(32699): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 21 03:29:34 root maldet(32699): {scan} signatures loaded: 17262 (14440 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 21 03:29:34 root maldet(32699): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 21 03:29:34 root maldet(32699): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 21 03:29:34 root maldet(32699): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 21 03:29:36 root maldet(32699): {scan} file list completed in 2s, found 97 files... Dec 21 03:29:36 root maldet(32699): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 21 03:29:36 root maldet(32699): {scan} scan of (97 files) in progress... Dec 21 03:29:47 root maldet(32699): {scan} scan completed on : files 97, malware hits 0, cleaned hits 0, time 14s Dec 21 03:29:47 root maldet(32699): {scan} scan report saved, to view run: maldet --report 211221-0329.32699 Dec 22 03:42:07 root maldet(30548): {update} checking for available updates... Dec 22 03:42:07 root maldet(30548): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 22 03:42:07 root maldet(30548): {update} hashing install files and checking against server... Dec 22 03:42:08 root maldet(30548): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 22 03:42:08 root maldet(30548): {update} latest version already installed. Dec 22 03:42:08 root maldet(30699): {sigup} performing signature update check... Dec 22 03:42:08 root maldet(30699): {sigup} local signature set is version 20211219614251 Dec 22 03:42:08 root maldet(30699): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 22 03:42:08 root maldet(30699): {sigup} latest signature set already installed Dec 22 03:42:08 root maldet(30817): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 22 03:42:09 root maldet(30817): {scan} signatures loaded: 17262 (14440 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 22 03:42:09 root maldet(30817): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 22 03:42:09 root maldet(30817): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 22 03:42:09 root maldet(30817): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 22 03:49:56 root maldet(30817): {scan} file list completed in 467s, found 287 files... Dec 22 03:49:56 root maldet(30817): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 22 03:49:56 root maldet(30817): {scan} scan of (287 files) in progress... Dec 22 03:50:25 root maldet(30817): {scan} scan completed on : files 287, malware hits 0, cleaned hits 0, time 497s Dec 22 03:50:25 root maldet(30817): {scan} scan report saved, to view run: maldet --report 211222-0342.30817 Dec 23 03:42:08 root maldet(6030): {update} checking for available updates... Dec 23 03:42:09 root maldet(6030): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 23 03:42:09 root maldet(6030): {update} hashing install files and checking against server... Dec 23 03:42:09 root maldet(6030): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 23 03:42:09 root maldet(6030): {update} latest version already installed. Dec 23 03:42:09 root maldet(6169): {sigup} performing signature update check... Dec 23 03:42:09 root maldet(6169): {sigup} local signature set is version 20211219614251 Dec 23 03:42:10 root maldet(6169): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 23 03:42:10 root maldet(6169): {sigup} new signature set 202112221288799 available Dec 23 03:42:10 root maldet(6169): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 23 03:42:11 root maldet(6169): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 23 03:42:11 root maldet(6169): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 23 03:42:11 root maldet(6169): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 23 03:42:12 root maldet(6169): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 23 03:42:12 root maldet(6169): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 23 03:42:12 root maldet(6169): {sigup} verified md5sum of maldet-sigpack.tgz Dec 23 03:42:12 root maldet(6169): {sigup} unpacked and installed maldet-sigpack.tgz Dec 23 03:42:12 root maldet(6169): {sigup} verified md5sum of maldet-clean.tgz Dec 23 03:42:13 root maldet(6169): {sigup} unpacked and installed maldet-clean.tgz Dec 23 03:42:13 root maldet(6169): {sigup} signature set update completed Dec 23 03:42:13 root maldet(6169): {sigup} 17264 signatures (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 23 03:42:13 root maldet(6426): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 23 03:42:26 root maldet(6426): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 23 03:42:26 root maldet(6426): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 23 03:42:26 root maldet(6426): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 23 03:42:26 root maldet(6426): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 23 03:42:28 root maldet(6426): {scan} file list completed in 2s, found 89 files... Dec 23 03:42:28 root maldet(6426): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 23 03:42:28 root maldet(6426): {scan} scan of (89 files) in progress... Dec 23 03:42:52 root maldet(6426): {scan} scan completed on : files 89, malware hits 0, cleaned hits 0, time 39s Dec 23 03:42:52 root maldet(6426): {scan} scan report saved, to view run: maldet --report 211223-0342.6426 Dec 24 03:11:25 root maldet(29307): {update} checking for available updates... Dec 24 03:11:26 root maldet(29307): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 24 03:11:26 root maldet(29307): {update} hashing install files and checking against server... Dec 24 03:11:26 root maldet(29307): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 24 03:11:26 root maldet(29307): {update} latest version already installed. Dec 24 03:11:26 root maldet(29447): {sigup} performing signature update check... Dec 24 03:11:26 root maldet(29447): {sigup} local signature set is version 202112221288799 Dec 24 03:11:27 root maldet(29447): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 24 03:11:27 root maldet(29447): {sigup} latest signature set already installed Dec 24 03:11:27 root maldet(29561): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 24 03:11:27 root maldet(29561): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 24 03:11:27 root maldet(29561): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 24 03:11:27 root maldet(29561): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 24 03:11:27 root maldet(29561): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 24 03:11:30 root maldet(29561): {scan} file list completed in 3s, found 6259 files... Dec 24 03:11:30 root maldet(29561): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 24 03:11:30 root maldet(29561): {scan} scan of (6259 files) in progress... Dec 24 03:12:01 root maldet(29561): {scan} scan completed on : files 6259, malware hits 0, cleaned hits 0, time 34s Dec 24 03:12:01 root maldet(29561): {scan} scan report saved, to view run: maldet --report 211224-0311.29561 Dec 25 03:49:18 root maldet(4193): {update} checking for available updates... Dec 25 03:49:18 root maldet(4193): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 25 03:49:18 root maldet(4193): {update} hashing install files and checking against server... Dec 25 03:49:18 root maldet(4193): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 25 03:49:18 root maldet(4193): {update} latest version already installed. Dec 25 03:49:18 root maldet(4339): {sigup} performing signature update check... Dec 25 03:49:18 root maldet(4339): {sigup} local signature set is version 202112221288799 Dec 25 03:49:18 root maldet(4339): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 25 03:49:18 root maldet(4339): {sigup} latest signature set already installed Dec 25 03:49:19 root maldet(4464): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 25 03:49:19 root maldet(4464): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 25 03:49:19 root maldet(4464): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 25 03:49:19 root maldet(4464): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 25 03:49:19 root maldet(4464): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 25 03:49:22 root maldet(4464): {scan} file list completed in 3s, found 576 files... Dec 25 03:49:22 root maldet(4464): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 25 03:49:22 root maldet(4464): {scan} scan of (576 files) in progress... Dec 25 03:49:49 root maldet(4464): {scan} scan completed on : files 576, malware hits 0, cleaned hits 0, time 30s Dec 25 03:49:49 root maldet(4464): {scan} scan report saved, to view run: maldet --report 211225-0349.4464 Dec 26 03:35:54 root maldet(31966): {update} checking for available updates... Dec 26 03:35:54 root maldet(31966): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 26 03:35:54 root maldet(31966): {update} hashing install files and checking against server... Dec 26 03:35:54 root maldet(31966): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 26 03:35:54 root maldet(31966): {update} latest version already installed. Dec 26 03:35:54 root maldet(32144): {sigup} performing signature update check... Dec 26 03:35:54 root maldet(32144): {sigup} local signature set is version 202112221288799 Dec 26 03:35:55 root maldet(32144): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 26 03:35:55 root maldet(32144): {sigup} new signature set 202112251962984 available Dec 26 03:35:55 root maldet(32144): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 26 03:35:56 root maldet(32144): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 26 03:35:57 root maldet(32144): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 26 03:35:57 root maldet(32144): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 26 03:35:58 root maldet(32144): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 26 03:35:58 root maldet(32144): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 26 03:35:58 root maldet(32144): {sigup} verified md5sum of maldet-sigpack.tgz Dec 26 03:35:59 root maldet(32144): {sigup} unpacked and installed maldet-sigpack.tgz Dec 26 03:35:59 root maldet(32144): {sigup} verified md5sum of maldet-clean.tgz Dec 26 03:35:59 root maldet(32144): {sigup} unpacked and installed maldet-clean.tgz Dec 26 03:35:59 root maldet(32144): {sigup} signature set update completed Dec 26 03:35:59 root maldet(32144): {sigup} 17264 signatures (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 26 03:36:00 root maldet(32512): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 26 03:36:14 root maldet(32512): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 26 03:36:14 root maldet(32512): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 26 03:36:14 root maldet(32512): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 26 03:36:16 root maldet(32512): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 26 03:36:47 root maldet(32512): {scan} file list completed in 33s, found 6001 files... Dec 26 03:36:47 root maldet(32512): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 26 03:36:47 root maldet(32512): {scan} scan of (6001 files) in progress... Dec 26 03:37:24 root maldet(32512): {scan} scan completed on : files 6001, malware hits 0, cleaned hits 0, time 84s Dec 26 03:37:24 root maldet(32512): {scan} scan report saved, to view run: maldet --report 211226-0335.32512 Dec 27 03:32:31 root maldet(24538): {update} checking for available updates... Dec 27 03:32:31 root maldet(24538): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 27 03:32:31 root maldet(24538): {update} hashing install files and checking against server... Dec 27 03:32:32 root maldet(24538): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 27 03:32:32 root maldet(24538): {update} latest version already installed. Dec 27 03:32:32 root maldet(24679): {sigup} performing signature update check... Dec 27 03:32:32 root maldet(24679): {sigup} local signature set is version 202112251962984 Dec 27 03:32:32 root maldet(24679): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 27 03:32:32 root maldet(24679): {sigup} latest signature set already installed Dec 27 03:32:32 root maldet(24792): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 27 03:32:33 root maldet(24792): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 27 03:32:33 root maldet(24792): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 27 03:32:33 root maldet(24792): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 27 03:32:33 root maldet(24792): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 27 03:32:36 root maldet(24792): {scan} file list completed in 3s, found 921 files... Dec 27 03:32:36 root maldet(24792): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 27 03:32:36 root maldet(24792): {scan} scan of (921 files) in progress... Dec 27 03:32:54 root maldet(24792): {scan} scan completed on : files 921, malware hits 0, cleaned hits 0, time 22s Dec 27 03:32:54 root maldet(24792): {scan} scan report saved, to view run: maldet --report 211227-0332.24792 Dec 28 03:41:04 root maldet(7234): {update} checking for available updates... Dec 28 03:41:06 root maldet(7234): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 28 03:41:06 root maldet(7234): {update} hashing install files and checking against server... Dec 28 03:41:06 root maldet(7234): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 28 03:41:06 root maldet(7234): {update} latest version already installed. Dec 28 03:41:06 root maldet(7373): {sigup} performing signature update check... Dec 28 03:41:06 root maldet(7373): {sigup} local signature set is version 202112251962984 Dec 28 03:41:06 root maldet(7373): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 28 03:41:06 root maldet(7373): {sigup} latest signature set already installed Dec 28 03:41:06 root maldet(7499): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 28 03:41:07 root maldet(7499): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 28 03:41:07 root maldet(7499): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 28 03:41:07 root maldet(7499): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 28 03:41:07 root maldet(7499): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 28 03:41:09 root maldet(7499): {scan} file list completed in 2s, found 96 files... Dec 28 03:41:09 root maldet(7499): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 28 03:41:09 root maldet(7499): {scan} scan of (96 files) in progress... Dec 28 03:41:14 root maldet(7499): {scan} scan completed on : files 96, malware hits 0, cleaned hits 0, time 8s Dec 28 03:41:14 root maldet(7499): {scan} scan report saved, to view run: maldet --report 211228-0341.7499 Dec 29 03:25:59 root maldet(31109): {update} checking for available updates... Dec 29 03:26:00 root maldet(31109): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 29 03:26:00 root maldet(31109): {update} hashing install files and checking against server... Dec 29 03:26:01 root maldet(31109): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 29 03:26:01 root maldet(31109): {update} latest version already installed. Dec 29 03:26:01 root maldet(31269): {sigup} performing signature update check... Dec 29 03:26:01 root maldet(31269): {sigup} local signature set is version 202112251962984 Dec 29 03:26:02 root maldet(31269): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 29 03:26:03 root maldet(31269): {sigup} new signature set 202112282637236 available Dec 29 03:26:03 root maldet(31269): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 29 03:26:04 root maldet(31269): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 29 03:26:04 root maldet(31269): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 29 03:26:04 root maldet(31269): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 29 03:26:05 root maldet(31269): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 29 03:26:05 root maldet(31269): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 29 03:26:05 root maldet(31269): {sigup} verified md5sum of maldet-sigpack.tgz Dec 29 03:26:07 root maldet(31269): {sigup} unpacked and installed maldet-sigpack.tgz Dec 29 03:26:07 root maldet(31269): {sigup} verified md5sum of maldet-clean.tgz Dec 29 03:26:07 root maldet(31269): {sigup} unpacked and installed maldet-clean.tgz Dec 29 03:26:07 root maldet(31269): {sigup} signature set update completed Dec 29 03:26:07 root maldet(31269): {sigup} 17264 signatures (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 29 03:26:07 root maldet(31545): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 29 03:26:21 root maldet(31545): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 29 03:26:21 root maldet(31545): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 29 03:26:21 root maldet(31545): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 29 03:26:21 root maldet(31545): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 29 03:46:54 root maldet(31545): {scan} file list completed in 1233s, found 236 files... Dec 29 03:46:54 root maldet(31545): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 29 03:46:54 root maldet(31545): {scan} scan of (236 files) in progress... Dec 29 03:47:53 root maldet(31545): {scan} scan completed on : files 236, malware hits 0, cleaned hits 0, time 1306s Dec 29 03:47:53 root maldet(31545): {scan} scan report saved, to view run: maldet --report 211229-0326.31545 Dec 30 03:27:44 root maldet(15776): {update} checking for available updates... Dec 30 03:27:44 root maldet(15776): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 30 03:27:44 root maldet(15776): {update} hashing install files and checking against server... Dec 30 03:27:45 root maldet(15776): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 30 03:27:45 root maldet(15776): {update} latest version already installed. Dec 30 03:27:45 root maldet(15910): {sigup} performing signature update check... Dec 30 03:27:45 root maldet(15910): {sigup} local signature set is version 202112282637236 Dec 30 03:27:46 root maldet(15910): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 30 03:27:46 root maldet(15910): {sigup} latest signature set already installed Dec 30 03:27:46 root maldet(16023): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 30 03:27:46 root maldet(16023): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 30 03:27:46 root maldet(16023): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 30 03:27:46 root maldet(16023): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 30 03:27:46 root maldet(16023): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 30 03:27:49 root maldet(16023): {scan} file list completed in 3s, found 76 files... Dec 30 03:27:49 root maldet(16023): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 30 03:27:49 root maldet(16023): {scan} scan of (76 files) in progress... Dec 30 03:28:00 root maldet(16023): {scan} scan completed on : files 76, malware hits 0, cleaned hits 0, time 14s Dec 30 03:28:00 root maldet(16023): {scan} scan report saved, to view run: maldet --report 211230-0327.16023 Dec 31 03:14:36 root maldet(3050): {update} checking for available updates... Dec 31 03:14:37 root maldet(3050): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 31 03:14:37 root maldet(3050): {update} hashing install files and checking against server... Dec 31 03:14:38 root maldet(3050): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 31 03:14:38 root maldet(3050): {update} latest version already installed. Dec 31 03:14:38 root maldet(3198): {sigup} performing signature update check... Dec 31 03:14:38 root maldet(3198): {sigup} local signature set is version 202112282637236 Dec 31 03:14:39 root maldet(3198): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 31 03:14:39 root maldet(3198): {sigup} latest signature set already installed Dec 31 03:14:39 root maldet(3313): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 31 03:14:39 root maldet(3313): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Dec 31 03:14:39 root maldet(3313): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 31 03:14:39 root maldet(3313): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 31 03:14:39 root maldet(3313): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 31 03:14:41 root maldet(3313): {scan} file list completed in 2s, found 103 files... Dec 31 03:14:41 root maldet(3313): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 31 03:14:41 root maldet(3313): {scan} scan of (103 files) in progress... Dec 31 03:14:55 root maldet(3313): {scan} scan completed on : files 103, malware hits 0, cleaned hits 0, time 15s Dec 31 03:14:55 root maldet(3313): {scan} scan report saved, to view run: maldet --report 211231-0314.3313 Jan 01 03:38:29 root maldet(14640): {update} checking for available updates... Jan 01 03:38:30 root maldet(14640): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 01 03:38:30 root maldet(14640): {update} hashing install files and checking against server... Jan 01 03:38:31 root maldet(14640): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 01 03:38:31 root maldet(14640): {update} latest version already installed. Jan 01 03:38:31 root maldet(14777): {sigup} performing signature update check... Jan 01 03:38:31 root maldet(14777): {sigup} local signature set is version 202112282637236 Jan 01 03:38:31 root maldet(14777): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 01 03:38:32 root maldet(14777): {sigup} new signature set 202112313311402 available Jan 01 03:38:32 root maldet(14777): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 01 03:38:33 root maldet(14777): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 01 03:38:33 root maldet(14777): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 01 03:38:33 root maldet(14777): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 01 03:38:34 root maldet(14777): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 01 03:38:34 root maldet(14777): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 01 03:38:34 root maldet(14777): {sigup} verified md5sum of maldet-sigpack.tgz Jan 01 03:38:35 root maldet(14777): {sigup} unpacked and installed maldet-sigpack.tgz Jan 01 03:38:35 root maldet(14777): {sigup} verified md5sum of maldet-clean.tgz Jan 01 03:38:35 root maldet(14777): {sigup} unpacked and installed maldet-clean.tgz Jan 01 03:38:35 root maldet(14777): {sigup} signature set update completed Jan 01 03:38:35 root maldet(14777): {sigup} 17264 signatures (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 01 03:38:35 root maldet(15024): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 01 03:41:24 root maldet(15024): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 01 03:41:24 root maldet(15024): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 01 03:41:24 root maldet(15024): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 01 03:41:24 root maldet(15024): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 01 03:54:49 root maldet(15024): {scan} file list completed in 805s, found 145 files... Jan 01 03:54:49 root maldet(15024): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 01 03:54:49 root maldet(15024): {scan} scan of (145 files) in progress... Jan 01 03:55:44 root maldet(15024): {scan} scan completed on : files 145, malware hits 0, cleaned hits 0, time 1029s Jan 01 03:55:44 root maldet(15024): {scan} scan report saved, to view run: maldet --report 220101-0338.15024 Jan 02 04:02:49 root maldet(1617): {update} checking for available updates... Jan 02 04:02:50 root maldet(1617): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 02 04:02:50 root maldet(1617): {update} hashing install files and checking against server... Jan 02 04:02:50 root maldet(1617): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 02 04:02:50 root maldet(1617): {update} latest version already installed. Jan 02 04:02:50 root maldet(1764): {sigup} performing signature update check... Jan 02 04:02:50 root maldet(1764): {sigup} local signature set is version 202112313311402 Jan 02 04:02:51 root maldet(1764): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 02 04:02:51 root maldet(1764): {sigup} new signature set 202201013942939 available Jan 02 04:02:51 root maldet(1764): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 02 04:02:52 root maldet(1764): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 02 04:02:52 root maldet(1764): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 02 04:02:52 root maldet(1764): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 02 04:02:52 root maldet(1764): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 02 04:02:52 root maldet(1764): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 02 04:02:52 root maldet(1764): {sigup} verified md5sum of maldet-sigpack.tgz Jan 02 04:02:53 root maldet(1764): {sigup} unpacked and installed maldet-sigpack.tgz Jan 02 04:02:53 root maldet(1764): {sigup} verified md5sum of maldet-clean.tgz Jan 02 04:02:53 root maldet(1764): {sigup} unpacked and installed maldet-clean.tgz Jan 02 04:02:53 root maldet(1764): {sigup} signature set update completed Jan 02 04:02:53 root maldet(1764): {sigup} 17264 signatures (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 02 04:02:53 root maldet(2057): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 02 04:03:07 root maldet(2057): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 02 04:03:07 root maldet(2057): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 02 04:03:07 root maldet(2057): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 02 04:03:07 root maldet(2057): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 02 04:27:26 root maldet(2057): {scan} file list completed in 1459s, found 91 files... Jan 02 04:27:26 root maldet(2057): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 02 04:27:26 root maldet(2057): {scan} scan of (91 files) in progress... Jan 02 04:28:05 root maldet(2057): {scan} scan completed on : files 91, malware hits 0, cleaned hits 0, time 1512s Jan 02 04:28:05 root maldet(2057): {scan} scan report saved, to view run: maldet --report 220102-0402.2057 Jan 03 03:43:24 root maldet(31352): {update} checking for available updates... Jan 03 03:43:25 root maldet(31352): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 03 03:43:25 root maldet(31352): {update} hashing install files and checking against server... Jan 03 03:43:26 root maldet(31352): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 03 03:43:26 root maldet(31352): {update} latest version already installed. Jan 03 03:43:26 root maldet(31536): {sigup} performing signature update check... Jan 03 03:43:26 root maldet(31536): {sigup} local signature set is version 202201013942939 Jan 03 03:43:27 root maldet(31536): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 03 03:43:27 root maldet(31536): {sigup} latest signature set already installed Jan 03 03:43:27 root maldet(31674): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 03 03:43:27 root maldet(31674): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 03 03:43:27 root maldet(31674): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 03 03:43:27 root maldet(31674): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 03 03:43:27 root maldet(31674): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 03 03:43:30 root maldet(31674): {scan} file list completed in 3s, found 3060 files... Jan 03 03:43:30 root maldet(31674): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 03 03:43:30 root maldet(31674): {scan} scan of (3060 files) in progress... Jan 03 03:44:34 root maldet(31674): {scan} scan completed on : files 3060, malware hits 0, cleaned hits 0, time 67s Jan 03 03:44:34 root maldet(31674): {scan} scan report saved, to view run: maldet --report 220103-0343.31674 Jan 04 03:22:36 root maldet(23740): {update} checking for available updates... Jan 04 03:22:37 root maldet(23740): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 04 03:22:37 root maldet(23740): {update} hashing install files and checking against server... Jan 04 03:22:38 root maldet(23740): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 04 03:22:38 root maldet(23740): {update} latest version already installed. Jan 04 03:22:38 root maldet(23889): {sigup} performing signature update check... Jan 04 03:22:38 root maldet(23889): {sigup} local signature set is version 202201013942939 Jan 04 03:22:38 root maldet(23889): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 04 03:22:38 root maldet(23889): {sigup} latest signature set already installed Jan 04 03:22:39 root maldet(24089): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 04 03:22:39 root maldet(24089): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 04 03:22:39 root maldet(24089): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 04 03:22:39 root maldet(24089): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 04 03:22:39 root maldet(24089): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/argafca/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/avadesignbuild/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/calalitsharma/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/delhicam/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 04 03:22:41 root maldet(24089): {scan} file list completed in 2s, found 110 files... Jan 04 03:22:41 root maldet(24089): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 04 03:22:41 root maldet(24089): {scan} scan of (110 files) in progress... Jan 04 03:22:53 root maldet(24089): {scan} scan completed on : files 110, malware hits 0, cleaned hits 0, time 14s Jan 04 03:22:53 root maldet(24089): {scan} scan report saved, to view run: maldet --report 220104-0322.24089 Jan 05 03:56:59 root maldet(25692): {update} checking for available updates... Jan 05 03:56:59 root maldet(25692): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 05 03:56:59 root maldet(25692): {update} hashing install files and checking against server... Jan 05 03:57:00 root maldet(25692): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 05 03:57:00 root maldet(25692): {update} latest version already installed. Jan 05 03:57:00 root maldet(25844): {sigup} performing signature update check... Jan 05 03:57:00 root maldet(25844): {sigup} local signature set is version 202201013942939 Jan 05 03:57:00 root maldet(25844): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 05 03:57:01 root maldet(25844): {sigup} new signature set 20220104423338 available Jan 05 03:57:01 root maldet(25844): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 05 03:57:02 root maldet(25844): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 05 03:57:03 root maldet(25844): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 05 03:57:03 root maldet(25844): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 05 03:57:04 root maldet(25844): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 05 03:57:04 root maldet(25844): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 05 03:57:04 root maldet(25844): {sigup} verified md5sum of maldet-sigpack.tgz Jan 05 03:57:05 root maldet(25844): {sigup} unpacked and installed maldet-sigpack.tgz Jan 05 03:57:05 root maldet(25844): {sigup} verified md5sum of maldet-clean.tgz Jan 05 03:57:05 root maldet(25844): {sigup} unpacked and installed maldet-clean.tgz Jan 05 03:57:05 root maldet(25844): {sigup} signature set update completed Jan 05 03:57:05 root maldet(25844): {sigup} 17264 signatures (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 05 03:57:05 root maldet(26118): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 05 03:57:19 root maldet(26118): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 05 03:57:19 root maldet(26118): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 05 03:57:19 root maldet(26118): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 05 03:57:19 root maldet(26118): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 05 04:14:55 root maldet(26118): {scan} file list completed in 1056s, found 103 files... Jan 05 04:14:55 root maldet(26118): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 05 04:14:55 root maldet(26118): {scan} scan of (103 files) in progress... Jan 05 04:15:25 root maldet(26118): {hit} malware hit {HEX}php.base64.inject.180 found for /home/bestdealmachiner/public_html/bypass-403.php Jan 05 04:15:25 root maldet(26118): {quar} malware quarantined from '/home/bestdealmachiner/public_html/bypass-403.php' to '/usr/local/maldetect/quarantine/bypass-403.php.1915822294' Jan 05 04:15:25 root maldet(26118): {scan} scan completed on : files 103, malware hits 1, cleaned hits 0, time 1100s Jan 05 04:15:25 root maldet(26118): {scan} scan report saved, to view run: maldet --report 220105-0357.26118 Jan 06 03:16:57 root maldet(22678): {update} checking for available updates... Jan 06 03:16:58 root maldet(22678): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 06 03:16:58 root maldet(22678): {update} hashing install files and checking against server... Jan 06 03:16:58 root maldet(22678): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 06 03:16:58 root maldet(22678): {update} latest version already installed. Jan 06 03:16:58 root maldet(22817): {sigup} performing signature update check... Jan 06 03:16:58 root maldet(22817): {sigup} local signature set is version 20220104423338 Jan 06 03:16:59 root maldet(22817): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 06 03:16:59 root maldet(22817): {sigup} latest signature set already installed Jan 06 03:16:59 root maldet(22930): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 06 03:16:59 root maldet(22930): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 06 03:16:59 root maldet(22930): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 06 03:16:59 root maldet(22930): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 06 03:16:59 root maldet(22930): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 06 03:17:02 root maldet(22930): {scan} file list completed in 3s, found 89 files... Jan 06 03:17:02 root maldet(22930): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 06 03:17:02 root maldet(22930): {scan} scan of (89 files) in progress... Jan 06 03:17:18 root maldet(22930): {hit} malware hit {YARA}php_in_image found for /home/dnrassociates/public_html/Dashboard/page/220105225125_PAGE.php Jan 06 03:17:18 root maldet(22930): {quar} malware quarantined from '/home/dnrassociates/public_html/Dashboard/page/220105225125_PAGE.php' to '/usr/local/maldetect/quarantine/220105225125_PAGE.php.214302207' Jan 06 03:17:18 root maldet(22930): {scan} scan completed on : files 89, malware hits 1, cleaned hits 0, time 19s Jan 06 03:17:18 root maldet(22930): {scan} scan report saved, to view run: maldet --report 220106-0316.22930 Jan 07 03:52:44 root maldet(4455): {update} checking for available updates... Jan 07 03:52:45 root maldet(4455): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 07 03:52:45 root maldet(4455): {update} hashing install files and checking against server... Jan 07 03:52:46 root maldet(4455): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 07 03:52:46 root maldet(4455): {update} latest version already installed. Jan 07 03:52:46 root maldet(4631): {sigup} performing signature update check... Jan 07 03:52:46 root maldet(4631): {sigup} local signature set is version 20220104423338 Jan 07 03:52:46 root maldet(4631): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 07 03:52:46 root maldet(4631): {sigup} latest signature set already installed Jan 07 03:52:47 root maldet(4756): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 07 03:52:47 root maldet(4756): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 07 03:52:47 root maldet(4756): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 07 03:52:47 root maldet(4756): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 07 03:52:47 root maldet(4756): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 07 03:52:49 root maldet(4756): {scan} file list completed in 2s, found 216 files... Jan 07 03:52:49 root maldet(4756): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 07 03:52:49 root maldet(4756): {scan} scan of (216 files) in progress... Jan 07 03:52:57 root maldet(4756): {scan} scan completed on : files 216, malware hits 0, cleaned hits 0, time 10s Jan 07 03:52:57 root maldet(4756): {scan} scan report saved, to view run: maldet --report 220107-0352.4756 Jan 08 03:43:41 root maldet(1882): {update} checking for available updates... Jan 08 03:43:41 root maldet(1882): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 08 03:43:41 root maldet(1882): {update} hashing install files and checking against server... Jan 08 03:43:42 root maldet(1882): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 08 03:43:42 root maldet(1882): {update} latest version already installed. Jan 08 03:43:42 root maldet(2029): {sigup} performing signature update check... Jan 08 03:43:42 root maldet(2029): {sigup} local signature set is version 20220104423338 Jan 08 03:43:43 root maldet(2029): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 08 03:43:43 root maldet(2029): {sigup} new signature set 202201071097633 available Jan 08 03:43:43 root maldet(2029): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 08 03:43:44 root maldet(2029): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 08 03:43:44 root maldet(2029): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 08 03:43:44 root maldet(2029): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 08 03:43:44 root maldet(2029): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 08 03:43:45 root maldet(2029): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 08 03:43:45 root maldet(2029): {sigup} verified md5sum of maldet-sigpack.tgz Jan 08 03:43:45 root maldet(2029): {sigup} unpacked and installed maldet-sigpack.tgz Jan 08 03:43:45 root maldet(2029): {sigup} verified md5sum of maldet-clean.tgz Jan 08 03:43:45 root maldet(2029): {sigup} unpacked and installed maldet-clean.tgz Jan 08 03:43:45 root maldet(2029): {sigup} signature set update completed Jan 08 03:43:45 root maldet(2029): {sigup} 17264 signatures (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 08 03:43:45 root maldet(2274): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 08 03:43:58 root maldet(2274): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 08 03:43:58 root maldet(2274): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 08 03:43:58 root maldet(2274): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 08 03:43:58 root maldet(2274): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 08 03:44:01 root maldet(2274): {scan} file list completed in 3s, found 3109 files... Jan 08 03:44:01 root maldet(2274): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 08 03:44:01 root maldet(2274): {scan} scan of (3109 files) in progress... Jan 08 03:45:11 root maldet(2274): {scan} scan completed on : files 3109, malware hits 0, cleaned hits 0, time 86s Jan 08 03:45:11 root maldet(2274): {scan} scan report saved, to view run: maldet --report 220108-0343.2274 Jan 09 03:57:50 root maldet(30788): {update} checking for available updates... Jan 09 03:57:50 root maldet(30788): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 09 03:57:50 root maldet(30788): {update} hashing install files and checking against server... Jan 09 03:57:50 root maldet(30788): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 09 03:57:50 root maldet(30788): {update} latest version already installed. Jan 09 03:57:51 root maldet(30922): {sigup} performing signature update check... Jan 09 03:57:51 root maldet(30922): {sigup} local signature set is version 202201071097633 Jan 09 03:57:51 root maldet(30922): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 09 03:57:51 root maldet(30922): {sigup} latest signature set already installed Jan 09 03:57:51 root maldet(31038): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 09 03:57:52 root maldet(31038): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 09 03:57:52 root maldet(31038): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 09 03:57:52 root maldet(31038): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 09 03:57:52 root maldet(31038): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 09 04:14:52 root maldet(31038): {scan} file list completed in 1020s, found 166 files... Jan 09 04:14:52 root maldet(31038): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 09 04:14:52 root maldet(31038): {scan} scan of (166 files) in progress... Jan 09 04:15:34 root maldet(31038): {scan} scan completed on : files 166, malware hits 0, cleaned hits 0, time 1063s Jan 09 04:15:34 root maldet(31038): {scan} scan report saved, to view run: maldet --report 220109-0357.31038 Jan 10 03:27:40 root maldet(13184): {update} checking for available updates... Jan 10 03:27:41 root maldet(13184): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 10 03:27:41 root maldet(13184): {update} hashing install files and checking against server... Jan 10 03:27:41 root maldet(13184): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 10 03:27:41 root maldet(13184): {update} latest version already installed. Jan 10 03:27:41 root maldet(13326): {sigup} performing signature update check... Jan 10 03:27:41 root maldet(13326): {sigup} local signature set is version 202201071097633 Jan 10 03:27:42 root maldet(13326): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 10 03:27:42 root maldet(13326): {sigup} latest signature set already installed Jan 10 03:27:42 root maldet(13440): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 10 03:27:43 root maldet(13440): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 10 03:27:43 root maldet(13440): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 10 03:27:43 root maldet(13440): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 10 03:27:43 root maldet(13440): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 10 03:27:45 root maldet(13440): {scan} file list completed in 2s, found 102 files... Jan 10 03:27:45 root maldet(13440): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 10 03:27:45 root maldet(13440): {scan} scan of (102 files) in progress... Jan 10 03:27:59 root maldet(13440): {scan} scan completed on : files 102, malware hits 0, cleaned hits 0, time 17s Jan 10 03:27:59 root maldet(13440): {scan} scan report saved, to view run: maldet --report 220110-0327.13440 Jan 11 03:14:05 root maldet(26720): {update} checking for available updates... Jan 11 03:14:06 root maldet(26720): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 11 03:14:06 root maldet(26720): {update} hashing install files and checking against server... Jan 11 03:14:06 root maldet(26720): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 11 03:14:06 root maldet(26720): {update} latest version already installed. Jan 11 03:14:07 root maldet(26856): {sigup} performing signature update check... Jan 11 03:14:07 root maldet(26856): {sigup} local signature set is version 202201071097633 Jan 11 03:14:07 root maldet(26856): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 11 03:14:07 root maldet(26856): {sigup} new signature set 202201101847287 available Jan 11 03:14:07 root maldet(26856): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 11 03:14:08 root maldet(26856): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 11 03:14:09 root maldet(26856): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 11 03:14:09 root maldet(26856): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 11 03:14:09 root maldet(26856): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 11 03:14:10 root maldet(26856): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 11 03:14:10 root maldet(26856): {sigup} verified md5sum of maldet-sigpack.tgz Jan 11 03:14:10 root maldet(26856): {sigup} unpacked and installed maldet-sigpack.tgz Jan 11 03:14:10 root maldet(26856): {sigup} verified md5sum of maldet-clean.tgz Jan 11 03:14:10 root maldet(26856): {sigup} unpacked and installed maldet-clean.tgz Jan 11 03:14:10 root maldet(26856): {sigup} signature set update completed Jan 11 03:14:10 root maldet(26856): {sigup} 17264 signatures (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 11 03:14:10 root maldet(27114): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 11 03:14:23 root maldet(27114): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 11 03:14:23 root maldet(27114): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 11 03:14:23 root maldet(27114): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 11 03:14:23 root maldet(27114): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 11 03:14:25 root maldet(27114): {scan} file list completed in 2s, found 98 files... Jan 11 03:14:25 root maldet(27114): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 11 03:14:25 root maldet(27114): {scan} scan of (98 files) in progress... Jan 11 03:14:46 root maldet(27114): {scan} scan completed on : files 98, malware hits 0, cleaned hits 0, time 36s Jan 11 03:14:46 root maldet(27114): {scan} scan report saved, to view run: maldet --report 220111-0314.27114 Jan 12 03:23:04 root maldet(28031): {update} checking for available updates... Jan 12 03:23:05 root maldet(28031): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 12 03:23:05 root maldet(28031): {update} hashing install files and checking against server... Jan 12 03:23:05 root maldet(28031): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 12 03:23:05 root maldet(28031): {update} latest version already installed. Jan 12 03:23:05 root maldet(28169): {sigup} performing signature update check... Jan 12 03:23:05 root maldet(28169): {sigup} local signature set is version 202201101847287 Jan 12 03:23:06 root maldet(28169): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 12 03:23:07 root maldet(28169): {sigup} latest signature set already installed Jan 12 03:23:07 root maldet(28286): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 12 03:23:09 root maldet(28286): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 12 03:23:09 root maldet(28286): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 12 03:23:09 root maldet(28286): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 12 03:23:09 root maldet(28286): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 12 03:36:32 root maldet(28286): {scan} file list completed in 803s, found 88 files... Jan 12 03:36:32 root maldet(28286): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 12 03:36:32 root maldet(28286): {scan} scan of (88 files) in progress... Jan 12 03:36:50 root maldet(28286): {scan} scan completed on : files 88, malware hits 0, cleaned hits 0, time 823s Jan 12 03:36:50 root maldet(28286): {scan} scan report saved, to view run: maldet --report 220112-0323.28286 Jan 13 03:21:57 root maldet(3741): {update} checking for available updates... Jan 13 03:21:58 root maldet(3741): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 13 03:21:58 root maldet(3741): {update} hashing install files and checking against server... Jan 13 03:21:58 root maldet(3741): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 13 03:21:58 root maldet(3741): {update} latest version already installed. Jan 13 03:21:58 root maldet(3877): {sigup} performing signature update check... Jan 13 03:21:58 root maldet(3877): {sigup} local signature set is version 202201101847287 Jan 13 03:21:59 root maldet(3877): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 13 03:21:59 root maldet(3877): {sigup} latest signature set already installed Jan 13 03:21:59 root maldet(3991): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 13 03:21:59 root maldet(3991): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 13 03:21:59 root maldet(3991): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 13 03:21:59 root maldet(3991): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 13 03:21:59 root maldet(3991): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 13 03:22:02 root maldet(3991): {scan} file list completed in 3s, found 211 files... Jan 13 03:22:02 root maldet(3991): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 13 03:22:02 root maldet(3991): {scan} scan of (211 files) in progress... Jan 13 03:23:31 root maldet(3991): {scan} scan completed on : files 211, malware hits 0, cleaned hits 0, time 92s Jan 13 03:23:31 root maldet(3991): {scan} scan report saved, to view run: maldet --report 220113-0321.3991 Jan 14 03:34:17 root maldet(2364): {update} checking for available updates... Jan 14 03:34:18 root maldet(2364): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 14 03:34:18 root maldet(2364): {update} hashing install files and checking against server... Jan 14 03:34:18 root maldet(2364): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 14 03:34:18 root maldet(2364): {update} latest version already installed. Jan 14 03:34:18 root maldet(2506): {sigup} performing signature update check... Jan 14 03:34:18 root maldet(2506): {sigup} local signature set is version 202201101847287 Jan 14 03:34:18 root maldet(2506): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 14 03:34:18 root maldet(2506): {sigup} new signature set 202201132521851 available Jan 14 03:34:18 root maldet(2506): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 14 03:34:19 root maldet(2506): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 14 03:34:19 root maldet(2506): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 14 03:34:19 root maldet(2506): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 14 03:34:19 root maldet(2506): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 14 03:34:19 root maldet(2506): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 14 03:34:19 root maldet(2506): {sigup} verified md5sum of maldet-sigpack.tgz Jan 14 03:34:20 root maldet(2506): {sigup} unpacked and installed maldet-sigpack.tgz Jan 14 03:34:20 root maldet(2506): {sigup} verified md5sum of maldet-clean.tgz Jan 14 03:34:20 root maldet(2506): {sigup} unpacked and installed maldet-clean.tgz Jan 14 03:34:20 root maldet(2506): {sigup} signature set update completed Jan 14 03:34:20 root maldet(2506): {sigup} 17264 signatures (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 14 03:34:20 root maldet(2745): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 14 03:34:33 root maldet(2745): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 14 03:34:33 root maldet(2745): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 14 03:34:33 root maldet(2745): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 14 03:34:33 root maldet(2745): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 14 03:34:35 root maldet(2745): {scan} file list completed in 2s, found 162 files... Jan 14 03:34:35 root maldet(2745): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 14 03:34:35 root maldet(2745): {scan} scan of (162 files) in progress... Jan 14 03:34:56 root maldet(2745): {scan} scan completed on : files 162, malware hits 0, cleaned hits 0, time 36s Jan 14 03:34:56 root maldet(2745): {scan} scan report saved, to view run: maldet --report 220114-0334.2745 Jan 15 03:15:32 root maldet(10587): {update} checking for available updates... Jan 15 03:15:32 root maldet(10587): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 15 03:15:32 root maldet(10587): {update} hashing install files and checking against server... Jan 15 03:15:32 root maldet(10587): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 15 03:15:32 root maldet(10587): {update} latest version already installed. Jan 15 03:15:32 root maldet(10730): {sigup} performing signature update check... Jan 15 03:15:32 root maldet(10730): {sigup} local signature set is version 202201132521851 Jan 15 03:15:32 root maldet(10730): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 15 03:15:32 root maldet(10730): {sigup} latest signature set already installed Jan 15 03:15:33 root maldet(10843): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 15 03:15:33 root maldet(10843): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 15 03:15:33 root maldet(10843): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 15 03:15:33 root maldet(10843): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 15 03:15:33 root maldet(10843): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 15 03:15:35 root maldet(10843): {scan} file list completed in 2s, found 119 files... Jan 15 03:15:35 root maldet(10843): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 15 03:15:35 root maldet(10843): {scan} scan of (119 files) in progress... Jan 15 03:15:47 root maldet(10843): {scan} scan completed on : files 119, malware hits 0, cleaned hits 0, time 14s Jan 15 03:15:47 root maldet(10843): {scan} scan report saved, to view run: maldet --report 220115-0315.10843 Jan 16 03:53:53 root maldet(24384): {update} checking for available updates... Jan 16 03:53:53 root maldet(24384): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 16 03:53:53 root maldet(24384): {update} hashing install files and checking against server... Jan 16 03:53:54 root maldet(24384): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 16 03:53:54 root maldet(24384): {update} latest version already installed. Jan 16 03:53:54 root maldet(24618): {sigup} performing signature update check... Jan 16 03:53:54 root maldet(24618): {sigup} local signature set is version 202201132521851 Jan 16 03:53:54 root maldet(24618): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 16 03:53:54 root maldet(24618): {sigup} latest signature set already installed Jan 16 03:53:54 root maldet(24814): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 16 03:53:57 root maldet(24814): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 16 03:53:57 root maldet(24814): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 16 03:53:57 root maldet(24814): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 16 03:53:57 root maldet(24814): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 16 04:10:09 root maldet(24814): {scan} file list completed in 972s, found 140 files... Jan 16 04:10:09 root maldet(24814): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 16 04:10:09 root maldet(24814): {scan} scan of (140 files) in progress... Jan 16 04:11:06 root maldet(24814): {scan} scan completed on : files 140, malware hits 0, cleaned hits 0, time 1032s Jan 16 04:11:06 root maldet(24814): {scan} scan report saved, to view run: maldet --report 220116-0353.24814 Jan 17 03:10:45 root maldet(2638): {update} checking for available updates... Jan 17 03:10:46 root maldet(2638): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 17 03:10:46 root maldet(2638): {update} hashing install files and checking against server... Jan 17 03:10:46 root maldet(2638): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 17 03:10:46 root maldet(2638): {update} latest version already installed. Jan 17 03:10:47 root maldet(2780): {sigup} performing signature update check... Jan 17 03:10:47 root maldet(2780): {sigup} local signature set is version 202201132521851 Jan 17 03:10:47 root maldet(2780): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 17 03:10:47 root maldet(2780): {sigup} new signature set 20220116472399 available Jan 17 03:10:47 root maldet(2780): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 17 03:10:47 root maldet(2780): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 17 03:10:47 root maldet(2780): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 17 03:10:47 root maldet(2780): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 17 03:10:48 root maldet(2780): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 17 03:10:48 root maldet(2780): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 17 03:10:48 root maldet(2780): {sigup} verified md5sum of maldet-sigpack.tgz Jan 17 03:10:48 root maldet(2780): {sigup} unpacked and installed maldet-sigpack.tgz Jan 17 03:10:48 root maldet(2780): {sigup} verified md5sum of maldet-clean.tgz Jan 17 03:10:48 root maldet(2780): {sigup} unpacked and installed maldet-clean.tgz Jan 17 03:10:48 root maldet(2780): {sigup} signature set update completed Jan 17 03:10:48 root maldet(2780): {sigup} 17264 signatures (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 17 03:10:48 root maldet(3022): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 17 03:11:02 root maldet(3022): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 17 03:11:02 root maldet(3022): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 17 03:11:02 root maldet(3022): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 17 03:11:02 root maldet(3022): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 17 03:11:04 root maldet(3022): {scan} file list completed in 2s, found 140 files... Jan 17 03:11:04 root maldet(3022): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 17 03:11:04 root maldet(3022): {scan} scan of (140 files) in progress... Jan 17 03:11:30 root maldet(3022): {scan} scan completed on : files 140, malware hits 0, cleaned hits 0, time 42s Jan 17 03:11:30 root maldet(3022): {scan} scan report saved, to view run: maldet --report 220117-0310.3022 Jan 18 03:30:16 root maldet(26335): {update} checking for available updates... Jan 18 03:30:16 root maldet(26335): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 18 03:30:16 root maldet(26335): {update} hashing install files and checking against server... Jan 18 03:30:16 root maldet(26335): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 18 03:30:16 root maldet(26335): {update} latest version already installed. Jan 18 03:30:18 root maldet(26475): {sigup} performing signature update check... Jan 18 03:30:18 root maldet(26475): {sigup} local signature set is version 20220116472399 Jan 18 03:30:18 root maldet(26475): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 18 03:30:18 root maldet(26475): {sigup} latest signature set already installed Jan 18 03:30:18 root maldet(26605): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 18 03:30:19 root maldet(26605): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 18 03:30:19 root maldet(26605): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 18 03:30:19 root maldet(26605): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 18 03:30:19 root maldet(26605): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 18 03:30:21 root maldet(26605): {scan} file list completed in 2s, found 18809 files... Jan 18 03:30:21 root maldet(26605): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 18 03:30:21 root maldet(26605): {scan} scan of (18809 files) in progress... Jan 18 03:33:03 root maldet(26605): {scan} scan completed on : files 18809, malware hits 0, cleaned hits 0, time 165s Jan 18 03:33:03 root maldet(26605): {scan} scan report saved, to view run: maldet --report 220118-0330.26605 Jan 19 04:03:49 root maldet(16030): {update} checking for available updates... Jan 19 04:03:49 root maldet(16030): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 19 04:03:50 root maldet(16030): {update} hashing install files and checking against server... Jan 19 04:03:50 root maldet(16030): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 19 04:03:50 root maldet(16030): {update} latest version already installed. Jan 19 04:03:50 root maldet(16292): {sigup} performing signature update check... Jan 19 04:03:50 root maldet(16292): {sigup} local signature set is version 20220116472399 Jan 19 04:03:50 root maldet(16292): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 19 04:03:51 root maldet(16292): {sigup} latest signature set already installed Jan 19 04:03:51 root maldet(16466): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 19 04:03:54 root maldet(16466): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 19 04:03:54 root maldet(16466): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 19 04:03:54 root maldet(16466): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 19 04:03:54 root maldet(16466): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 19 04:24:03 root maldet(16466): {scan} file list completed in 1208s, found 1002 files... Jan 19 04:24:03 root maldet(16466): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 19 04:24:03 root maldet(16466): {scan} scan of (1002 files) in progress... Jan 19 04:25:46 root maldet(16466): {hit} malware hit {HEX}php.malware.fopo.551 found for /home/mahabirconstruct/public_html/blog/wp-content/plugins/ubh/tool.php Jan 19 04:25:47 root maldet(16466): {quar} malware quarantined from '/home/mahabirconstruct/public_html/blog/wp-content/plugins/ubh/tool.php' to '/usr/local/maldetect/quarantine/tool.php.2655724682' Jan 19 04:25:49 root maldet(16466): {scan} scan completed on : files 1002, malware hits 1, cleaned hits 0, time 1316s Jan 19 04:25:49 root maldet(16466): {scan} scan report saved, to view run: maldet --report 220119-0403.16466 Jan 20 03:29:38 root maldet(592): {update} checking for available updates... Jan 20 03:29:39 root maldet(592): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 20 03:29:39 root maldet(592): {update} hashing install files and checking against server... Jan 20 03:29:39 root maldet(592): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 20 03:29:39 root maldet(592): {update} latest version already installed. Jan 20 03:29:39 root maldet(761): {sigup} performing signature update check... Jan 20 03:29:39 root maldet(761): {sigup} local signature set is version 20220116472399 Jan 20 03:29:39 root maldet(761): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 20 03:29:39 root maldet(761): {sigup} new signature set 202201191219603 available Jan 20 03:29:39 root maldet(761): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 20 03:29:40 root maldet(761): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 20 03:29:40 root maldet(761): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 20 03:29:40 root maldet(761): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 20 03:29:40 root maldet(761): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 20 03:29:41 root maldet(761): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 20 03:29:41 root maldet(761): {sigup} verified md5sum of maldet-sigpack.tgz Jan 20 03:29:41 root maldet(761): {sigup} unpacked and installed maldet-sigpack.tgz Jan 20 03:29:41 root maldet(761): {sigup} verified md5sum of maldet-clean.tgz Jan 20 03:29:41 root maldet(761): {sigup} unpacked and installed maldet-clean.tgz Jan 20 03:29:41 root maldet(761): {sigup} signature set update completed Jan 20 03:29:41 root maldet(761): {sigup} 17264 signatures (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 20 03:29:41 root maldet(1001): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 20 03:29:54 root maldet(1001): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 20 03:29:54 root maldet(1001): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 20 03:29:54 root maldet(1001): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 20 03:29:54 root maldet(1001): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 20 03:29:57 root maldet(1001): {scan} file list completed in 3s, found 404 files... Jan 20 03:29:57 root maldet(1001): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 20 03:29:57 root maldet(1001): {scan} scan of (404 files) in progress... Jan 20 03:30:59 root maldet(1001): {scan} scan completed on : files 404, malware hits 0, cleaned hits 0, time 78s Jan 20 03:30:59 root maldet(1001): {scan} scan report saved, to view run: maldet --report 220120-0329.1001 Jan 21 03:44:14 root maldet(20388): {update} checking for available updates... Jan 21 03:44:14 root maldet(20388): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 21 03:44:14 root maldet(20388): {update} hashing install files and checking against server... Jan 21 03:44:15 root maldet(20388): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 21 03:44:15 root maldet(20388): {update} latest version already installed. Jan 21 03:44:15 root maldet(20522): {sigup} performing signature update check... Jan 21 03:44:15 root maldet(20522): {sigup} local signature set is version 202201191219603 Jan 21 03:44:15 root maldet(20522): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 21 03:44:15 root maldet(20522): {sigup} latest signature set already installed Jan 21 03:44:15 root maldet(20635): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 21 03:44:15 root maldet(20635): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 21 03:44:15 root maldet(20635): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 21 03:44:15 root maldet(20635): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 21 03:44:15 root maldet(20635): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 21 03:44:18 root maldet(20635): {scan} file list completed in 3s, found 111 files... Jan 21 03:44:18 root maldet(20635): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 21 03:44:18 root maldet(20635): {scan} scan of (111 files) in progress... Jan 21 03:44:26 root maldet(20635): {scan} scan completed on : files 111, malware hits 0, cleaned hits 0, time 11s Jan 21 03:44:26 root maldet(20635): {scan} scan report saved, to view run: maldet --report 220121-0344.20635 Jan 22 03:12:15 root maldet(12737): {update} checking for available updates... Jan 22 03:12:15 root maldet(12737): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 22 03:12:15 root maldet(12737): {update} hashing install files and checking against server... Jan 22 03:12:16 root maldet(12737): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 22 03:12:16 root maldet(12737): {update} latest version already installed. Jan 22 03:12:16 root maldet(12879): {sigup} performing signature update check... Jan 22 03:12:16 root maldet(12879): {sigup} local signature set is version 202201191219603 Jan 22 03:12:16 root maldet(12879): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 22 03:12:16 root maldet(12879): {sigup} latest signature set already installed Jan 22 03:12:16 root maldet(12998): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 22 03:12:16 root maldet(12998): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 22 03:12:16 root maldet(12998): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 22 03:12:16 root maldet(12998): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 22 03:12:16 root maldet(12998): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 22 03:12:19 root maldet(12998): {scan} file list completed in 3s, found 164 files... Jan 22 03:12:19 root maldet(12998): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 22 03:12:19 root maldet(12998): {scan} scan of (164 files) in progress... Jan 22 03:12:28 root maldet(12998): {scan} scan completed on : files 164, malware hits 0, cleaned hits 0, time 12s Jan 22 03:12:28 root maldet(12998): {scan} scan report saved, to view run: maldet --report 220122-0312.12998 Jan 23 03:55:08 root maldet(26530): {update} checking for available updates... Jan 23 03:55:09 root maldet(26530): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 23 03:55:09 root maldet(26530): {update} hashing install files and checking against server... Jan 23 03:55:09 root maldet(26530): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 23 03:55:09 root maldet(26530): {update} latest version already installed. Jan 23 03:55:09 root maldet(26705): {sigup} performing signature update check... Jan 23 03:55:09 root maldet(26705): {sigup} local signature set is version 202201191219603 Jan 23 03:55:09 root maldet(26705): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 23 03:55:10 root maldet(26705): {sigup} new signature set 20220122476998 available Jan 23 03:55:10 root maldet(26705): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 23 03:55:11 root maldet(26705): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 23 03:55:11 root maldet(26705): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 23 03:55:11 root maldet(26705): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 23 03:55:11 root maldet(26705): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 23 03:55:11 root maldet(26705): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 23 03:55:11 root maldet(26705): {sigup} verified md5sum of maldet-sigpack.tgz Jan 23 03:55:12 root maldet(26705): {sigup} unpacked and installed maldet-sigpack.tgz Jan 23 03:55:12 root maldet(26705): {sigup} verified md5sum of maldet-clean.tgz Jan 23 03:55:12 root maldet(26705): {sigup} unpacked and installed maldet-clean.tgz Jan 23 03:55:12 root maldet(26705): {sigup} signature set update completed Jan 23 03:55:12 root maldet(26705): {sigup} 17264 signatures (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 23 03:55:12 root maldet(27017): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 23 03:55:33 root maldet(27017): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 23 03:55:33 root maldet(27017): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 23 03:55:33 root maldet(27017): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 23 03:55:33 root maldet(27017): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 23 04:19:11 root maldet(27017): {scan} file list completed in 1418s, found 89 files... Jan 23 04:19:11 root maldet(27017): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 23 04:19:11 root maldet(27017): {scan} scan of (89 files) in progress... Jan 23 04:19:43 root maldet(27017): {scan} scan completed on : files 89, malware hits 0, cleaned hits 0, time 1471s Jan 23 04:19:43 root maldet(27017): {scan} scan report saved, to view run: maldet --report 220123-0355.27017 Jan 24 03:35:26 root maldet(5336): {update} checking for available updates... Jan 24 03:35:26 root maldet(5336): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 24 03:35:26 root maldet(5336): {update} hashing install files and checking against server... Jan 24 03:35:27 root maldet(5336): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 24 03:35:27 root maldet(5336): {update} latest version already installed. Jan 24 03:35:27 root maldet(5518): {sigup} performing signature update check... Jan 24 03:35:27 root maldet(5518): {sigup} local signature set is version 20220122476998 Jan 24 03:35:27 root maldet(5518): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 24 03:35:27 root maldet(5518): {sigup} latest signature set already installed Jan 24 03:35:27 root maldet(5632): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 24 03:35:28 root maldet(5632): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 24 03:35:28 root maldet(5632): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 24 03:35:28 root maldet(5632): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 24 03:35:28 root maldet(5632): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 24 03:35:31 root maldet(5632): {scan} file list completed in 3s, found 72 files... Jan 24 03:35:31 root maldet(5632): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 24 03:35:31 root maldet(5632): {scan} scan of (72 files) in progress... Jan 24 03:35:42 root maldet(5632): {scan} scan completed on : files 72, malware hits 0, cleaned hits 0, time 15s Jan 24 03:35:42 root maldet(5632): {scan} scan report saved, to view run: maldet --report 220124-0335.5632 Jan 25 03:12:15 root maldet(6810): {update} checking for available updates... Jan 25 03:12:16 root maldet(6810): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 25 03:12:16 root maldet(6810): {update} hashing install files and checking against server... Jan 25 03:12:16 root maldet(6810): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 25 03:12:16 root maldet(6810): {update} latest version already installed. Jan 25 03:12:16 root maldet(6943): {sigup} performing signature update check... Jan 25 03:12:16 root maldet(6943): {sigup} local signature set is version 20220122476998 Jan 25 03:12:16 root maldet(6943): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 25 03:12:16 root maldet(6943): {sigup} latest signature set already installed Jan 25 03:12:17 root maldet(7057): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 25 03:12:17 root maldet(7057): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 25 03:12:17 root maldet(7057): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 25 03:12:17 root maldet(7057): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 25 03:12:17 root maldet(7057): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 25 03:12:19 root maldet(7057): {scan} file list completed in 2s, found 100 files... Jan 25 03:12:19 root maldet(7057): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 25 03:12:19 root maldet(7057): {scan} scan of (100 files) in progress... Jan 25 03:12:34 root maldet(7057): {scan} scan completed on : files 100, malware hits 0, cleaned hits 0, time 17s Jan 25 03:12:34 root maldet(7057): {scan} scan report saved, to view run: maldet --report 220125-0312.7057 Jan 26 03:21:30 root maldet(17996): {update} checking for available updates... Jan 26 03:21:30 root maldet(17996): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 26 03:21:30 root maldet(17996): {update} hashing install files and checking against server... Jan 26 03:21:30 root maldet(17996): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 26 03:21:30 root maldet(17996): {update} latest version already installed. Jan 26 03:21:31 root maldet(18145): {sigup} performing signature update check... Jan 26 03:21:31 root maldet(18145): {sigup} local signature set is version 20220122476998 Jan 26 03:21:31 root maldet(18145): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 26 03:21:31 root maldet(18145): {sigup} latest signature set already installed Jan 26 03:21:31 root maldet(18259): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 26 03:21:33 root maldet(18259): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 26 03:21:33 root maldet(18259): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 26 03:21:33 root maldet(18259): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 26 03:21:33 root maldet(18259): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 26 03:29:08 root maldet(18259): {scan} file list completed in 455s, found 2130 files... Jan 26 03:29:08 root maldet(18259): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 26 03:29:08 root maldet(18259): {scan} scan of (2130 files) in progress... Jan 26 03:31:59 root maldet(18259): {scan} scan completed on : files 2130, malware hits 0, cleaned hits 0, time 628s Jan 26 03:31:59 root maldet(18259): {scan} scan report saved, to view run: maldet --report 220126-0321.18259 Jan 27 03:36:54 root maldet(11871): {update} checking for available updates... Jan 27 03:36:55 root maldet(11871): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 27 03:36:55 root maldet(11871): {update} hashing install files and checking against server... Jan 27 03:36:55 root maldet(11871): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 27 03:36:55 root maldet(11871): {update} latest version already installed. Jan 27 03:36:55 root maldet(12006): {sigup} performing signature update check... Jan 27 03:36:55 root maldet(12006): {sigup} local signature set is version 20220122476998 Jan 27 03:36:56 root maldet(12006): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 27 03:36:56 root maldet(12006): {sigup} latest signature set already installed Jan 27 03:36:56 root maldet(12118): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 27 03:36:57 root maldet(12118): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 27 03:36:57 root maldet(12118): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 27 03:36:57 root maldet(12118): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 27 03:36:57 root maldet(12118): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 27 03:37:00 root maldet(12118): {scan} file list completed in 3s, found 2800 files... Jan 27 03:37:00 root maldet(12118): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 27 03:37:00 root maldet(12118): {scan} scan of (2800 files) in progress... Jan 27 03:39:14 root maldet(12118): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Jan 27 03:39:14 root maldet(12118): {scan} scan completed on : files 2800, malware hits 0, cleaned hits 0, time 138s Jan 27 03:39:14 root maldet(12118): {scan} scan report saved, to view run: maldet --report 220127-0336.12118 Jan 28 03:22:29 root maldet(7383): {update} checking for available updates... Jan 28 03:22:30 root maldet(7383): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 28 03:22:30 root maldet(7383): {update} hashing install files and checking against server... Jan 28 03:22:30 root maldet(7383): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 28 03:22:30 root maldet(7383): {update} latest version already installed. Jan 28 03:22:30 root maldet(7519): {sigup} performing signature update check... Jan 28 03:22:30 root maldet(7519): {sigup} local signature set is version 20220122476998 Jan 28 03:22:31 root maldet(7519): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 28 03:22:31 root maldet(7519): {sigup} latest signature set already installed Jan 28 03:22:31 root maldet(7631): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 28 03:22:31 root maldet(7631): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 28 03:22:31 root maldet(7631): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 28 03:22:31 root maldet(7631): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 28 03:22:31 root maldet(7631): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 28 03:22:34 root maldet(7631): {scan} file list completed in 3s, found 133 files... Jan 28 03:22:34 root maldet(7631): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 28 03:22:34 root maldet(7631): {scan} scan of (133 files) in progress... Jan 28 03:22:43 root maldet(7631): {scan} scan completed on : files 133, malware hits 0, cleaned hits 0, time 12s Jan 28 03:22:43 root maldet(7631): {scan} scan report saved, to view run: maldet --report 220128-0322.7631 Jan 29 03:12:53 root maldet(26565): {update} checking for available updates... Jan 29 03:12:54 root maldet(26565): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 29 03:12:54 root maldet(26565): {update} hashing install files and checking against server... Jan 29 03:12:54 root maldet(26565): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 29 03:12:54 root maldet(26565): {update} latest version already installed. Jan 29 03:12:54 root maldet(26699): {sigup} performing signature update check... Jan 29 03:12:54 root maldet(26699): {sigup} local signature set is version 20220122476998 Jan 29 03:12:54 root maldet(26699): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 29 03:12:54 root maldet(26699): {sigup} new signature set 20220128521654 available Jan 29 03:12:54 root maldet(26699): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 29 03:12:55 root maldet(26699): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 29 03:12:55 root maldet(26699): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 29 03:12:55 root maldet(26699): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 29 03:12:55 root maldet(26699): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 29 03:12:55 root maldet(26699): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 29 03:12:55 root maldet(26699): {sigup} verified md5sum of maldet-sigpack.tgz Jan 29 03:12:56 root maldet(26699): {sigup} unpacked and installed maldet-sigpack.tgz Jan 29 03:12:56 root maldet(26699): {sigup} verified md5sum of maldet-clean.tgz Jan 29 03:12:56 root maldet(26699): {sigup} unpacked and installed maldet-clean.tgz Jan 29 03:12:56 root maldet(26699): {sigup} signature set update completed Jan 29 03:12:56 root maldet(26699): {sigup} 17264 signatures (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 29 03:12:56 root maldet(26945): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 29 03:13:09 root maldet(26945): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 29 03:13:09 root maldet(26945): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 29 03:13:09 root maldet(26945): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 29 03:13:09 root maldet(26945): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 29 03:13:12 root maldet(26945): {scan} file list completed in 3s, found 182 files... Jan 29 03:13:12 root maldet(26945): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 29 03:13:12 root maldet(26945): {scan} scan of (182 files) in progress... Jan 29 03:13:31 root maldet(26945): {scan} scan completed on : files 182, malware hits 0, cleaned hits 0, time 35s Jan 29 03:13:31 root maldet(26945): {scan} scan report saved, to view run: maldet --report 220129-0312.26945 Jan 30 03:49:27 root maldet(7952): {update} checking for available updates... Jan 30 03:49:27 root maldet(7952): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 30 03:49:27 root maldet(7952): {update} hashing install files and checking against server... Jan 30 03:49:28 root maldet(7952): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 30 03:49:28 root maldet(7952): {update} latest version already installed. Jan 30 03:49:28 root maldet(8089): {sigup} performing signature update check... Jan 30 03:49:28 root maldet(8089): {sigup} local signature set is version 20220128521654 Jan 30 03:49:28 root maldet(8089): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 30 03:49:28 root maldet(8089): {sigup} latest signature set already installed Jan 30 03:49:28 root maldet(8245): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 30 03:49:29 root maldet(8245): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 30 03:49:29 root maldet(8245): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 30 03:49:29 root maldet(8245): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 30 03:49:29 root maldet(8245): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 30 03:56:17 root maldet(8245): {scan} file list completed in 408s, found 18907 files... Jan 30 03:56:17 root maldet(8245): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 30 03:56:17 root maldet(8245): {scan} scan of (18907 files) in progress... Jan 30 04:10:21 root maldet(8245): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Jan 30 04:10:21 root maldet(8245): {scan} scan completed on : files 18907, malware hits 0, cleaned hits 0, time 1253s Jan 30 04:10:21 root maldet(8245): {scan} scan report saved, to view run: maldet --report 220130-0349.8245 Jan 31 03:17:50 root maldet(7138): {update} checking for available updates... Jan 31 03:17:50 root maldet(7138): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 31 03:17:50 root maldet(7138): {update} hashing install files and checking against server... Jan 31 03:17:51 root maldet(7138): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 31 03:17:51 root maldet(7138): {update} latest version already installed. Jan 31 03:17:51 root maldet(7282): {sigup} performing signature update check... Jan 31 03:17:51 root maldet(7282): {sigup} local signature set is version 20220128521654 Jan 31 03:17:51 root maldet(7282): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 31 03:17:51 root maldet(7282): {sigup} latest signature set already installed Jan 31 03:17:51 root maldet(7396): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 31 03:17:52 root maldet(7396): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Jan 31 03:17:52 root maldet(7396): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 31 03:17:52 root maldet(7396): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 31 03:17:52 root maldet(7396): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 31 03:17:54 root maldet(7396): {scan} file list completed in 2s, found 210 files... Jan 31 03:17:54 root maldet(7396): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 31 03:17:54 root maldet(7396): {scan} scan of (210 files) in progress... Jan 31 03:18:14 root maldet(7396): {scan} scan completed on : files 210, malware hits 0, cleaned hits 0, time 23s Jan 31 03:18:14 root maldet(7396): {scan} scan report saved, to view run: maldet --report 220131-0317.7396 Feb 01 03:42:18 root maldet(21921): {update} checking for available updates... Feb 01 03:42:18 root maldet(21921): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 01 03:42:18 root maldet(21921): {update} hashing install files and checking against server... Feb 01 03:42:20 root maldet(21921): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 01 03:42:20 root maldet(21921): {update} latest version already installed. Feb 01 03:42:20 root maldet(22062): {sigup} performing signature update check... Feb 01 03:42:20 root maldet(22062): {sigup} local signature set is version 20220128521654 Feb 01 03:42:20 root maldet(22062): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 01 03:42:20 root maldet(22062): {sigup} new signature set 202201311197864 available Feb 01 03:42:20 root maldet(22062): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 01 03:42:21 root maldet(22062): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 01 03:42:21 root maldet(22062): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 01 03:42:21 root maldet(22062): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 01 03:42:21 root maldet(22062): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 01 03:42:21 root maldet(22062): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 01 03:42:21 root maldet(22062): {sigup} verified md5sum of maldet-sigpack.tgz Feb 01 03:42:22 root maldet(22062): {sigup} unpacked and installed maldet-sigpack.tgz Feb 01 03:42:22 root maldet(22062): {sigup} verified md5sum of maldet-clean.tgz Feb 01 03:42:22 root maldet(22062): {sigup} unpacked and installed maldet-clean.tgz Feb 01 03:42:22 root maldet(22062): {sigup} signature set update completed Feb 01 03:42:22 root maldet(22062): {sigup} 17264 signatures (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 01 03:42:22 root maldet(22307): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 01 03:42:35 root maldet(22307): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 01 03:42:35 root maldet(22307): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 01 03:42:35 root maldet(22307): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 01 03:42:35 root maldet(22307): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 01 03:42:45 root maldet(22307): {scan} file list completed in 10s, found 131 files... Feb 01 03:42:45 root maldet(22307): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 01 03:42:45 root maldet(22307): {scan} scan of (131 files) in progress... Feb 01 03:43:09 root maldet(22307): {scan} scan completed on : files 131, malware hits 0, cleaned hits 0, time 47s Feb 01 03:43:09 root maldet(22307): {scan} scan report saved, to view run: maldet --report 220201-0342.22307 Feb 02 03:30:45 root maldet(14240): {update} checking for available updates... Feb 02 03:30:46 root maldet(14240): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 02 03:30:46 root maldet(14240): {update} hashing install files and checking against server... Feb 02 03:30:46 root maldet(14240): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 02 03:30:46 root maldet(14240): {update} latest version already installed. Feb 02 03:30:46 root maldet(14375): {sigup} performing signature update check... Feb 02 03:30:46 root maldet(14375): {sigup} local signature set is version 202201311197864 Feb 02 03:30:46 root maldet(14375): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 02 03:30:47 root maldet(14375): {sigup} new signature set 202202011829702 available Feb 02 03:30:47 root maldet(14375): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 02 03:30:47 root maldet(14375): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 02 03:30:47 root maldet(14375): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 02 03:30:47 root maldet(14375): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 02 03:30:47 root maldet(14375): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 02 03:30:48 root maldet(14375): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 02 03:30:48 root maldet(14375): {sigup} verified md5sum of maldet-sigpack.tgz Feb 02 03:30:49 root maldet(14375): {sigup} unpacked and installed maldet-sigpack.tgz Feb 02 03:30:50 root maldet(14375): {sigup} verified md5sum of maldet-clean.tgz Feb 02 03:30:50 root maldet(14375): {sigup} unpacked and installed maldet-clean.tgz Feb 02 03:30:50 root maldet(14375): {sigup} signature set update completed Feb 02 03:30:50 root maldet(14375): {sigup} 17264 signatures (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 02 03:30:50 root maldet(14626): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 02 03:33:06 root maldet(14626): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 02 03:33:06 root maldet(14626): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 02 03:33:06 root maldet(14626): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 02 03:33:06 root maldet(14626): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 02 03:51:54 root maldet(14626): {scan} file list completed in 1128s, found 840 files... Feb 02 03:51:54 root maldet(14626): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 02 03:51:54 root maldet(14626): {scan} scan of (840 files) in progress... Feb 02 03:52:58 root maldet(14626): {scan} scan completed on : files 840, malware hits 0, cleaned hits 0, time 1328s Feb 02 03:52:58 root maldet(14626): {scan} scan report saved, to view run: maldet --report 220202-0330.14626 Feb 03 03:21:42 root maldet(13941): {update} checking for available updates... Feb 03 03:21:42 root maldet(13941): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 03 03:21:43 root maldet(13941): {update} hashing install files and checking against server... Feb 03 03:21:43 root maldet(13941): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 03 03:21:43 root maldet(13941): {update} latest version already installed. Feb 03 03:21:43 root maldet(14076): {sigup} performing signature update check... Feb 03 03:21:43 root maldet(14076): {sigup} local signature set is version 202202011829702 Feb 03 03:21:43 root maldet(14076): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 03 03:21:43 root maldet(14076): {sigup} latest signature set already installed Feb 03 03:21:43 root maldet(14190): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 03 03:21:44 root maldet(14190): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 03 03:21:44 root maldet(14190): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 03 03:21:44 root maldet(14190): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 03 03:21:44 root maldet(14190): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 03 03:21:47 root maldet(14190): {scan} file list completed in 2s, found 6149 files... Feb 03 03:21:47 root maldet(14190): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 03 03:21:47 root maldet(14190): {scan} scan of (6149 files) in progress... Feb 03 03:21:50 root maldet(14190): {scan} scan completed on : files 6149, malware hits 0, cleaned hits 0, time 7s Feb 03 03:21:50 root maldet(14190): {scan} scan report saved, to view run: maldet --report 220203-0321.14190 Feb 04 03:46:44 root maldet(20931): {update} checking for available updates... Feb 04 03:46:44 root maldet(20931): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 04 03:46:44 root maldet(20931): {update} hashing install files and checking against server... Feb 04 03:46:44 root maldet(20931): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 04 03:46:44 root maldet(20931): {update} latest version already installed. Feb 04 03:46:44 root maldet(21118): {sigup} performing signature update check... Feb 04 03:46:44 root maldet(21118): {sigup} local signature set is version 202202011829702 Feb 04 03:46:45 root maldet(21118): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 04 03:46:45 root maldet(21118): {sigup} latest signature set already installed Feb 04 03:46:45 root maldet(21274): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 04 03:46:45 root maldet(21274): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 04 03:46:45 root maldet(21274): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 04 03:46:45 root maldet(21274): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 04 03:46:45 root maldet(21274): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 04 03:46:47 root maldet(21274): {scan} file list completed in 2s, found 181 files... Feb 04 03:46:47 root maldet(21274): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 04 03:46:47 root maldet(21274): {scan} scan of (181 files) in progress... Feb 04 03:46:48 root maldet(21274): {scan} scan completed on : files 181, malware hits 0, cleaned hits 0, time 3s Feb 04 03:46:48 root maldet(21274): {scan} scan report saved, to view run: maldet --report 220204-0346.21274 Feb 05 03:24:08 root maldet(3477): {update} checking for available updates... Feb 05 03:24:08 root maldet(3477): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 05 03:24:08 root maldet(3477): {update} hashing install files and checking against server... Feb 05 03:24:08 root maldet(3477): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 05 03:24:08 root maldet(3477): {update} latest version already installed. Feb 05 03:24:08 root maldet(3624): {sigup} performing signature update check... Feb 05 03:24:08 root maldet(3624): {sigup} local signature set is version 202202011829702 Feb 05 03:24:09 root maldet(3624): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 05 03:24:09 root maldet(3624): {sigup} new signature set 202202042503831 available Feb 05 03:24:09 root maldet(3624): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 05 03:24:09 root maldet(3624): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 05 03:24:09 root maldet(3624): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 05 03:24:09 root maldet(3624): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 05 03:24:09 root maldet(3624): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 05 03:24:10 root maldet(3624): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 05 03:24:10 root maldet(3624): {sigup} verified md5sum of maldet-sigpack.tgz Feb 05 03:24:10 root maldet(3624): {sigup} unpacked and installed maldet-sigpack.tgz Feb 05 03:24:10 root maldet(3624): {sigup} verified md5sum of maldet-clean.tgz Feb 05 03:24:10 root maldet(3624): {sigup} unpacked and installed maldet-clean.tgz Feb 05 03:24:10 root maldet(3624): {sigup} signature set update completed Feb 05 03:24:10 root maldet(3624): {sigup} 17264 signatures (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 05 03:24:10 root maldet(3862): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 05 03:24:24 root maldet(3862): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 05 03:24:24 root maldet(3862): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 05 03:24:24 root maldet(3862): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 05 03:24:24 root maldet(3862): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 05 03:24:26 root maldet(3862): {scan} file list completed in 2s, found 87 files... Feb 05 03:24:26 root maldet(3862): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 05 03:24:26 root maldet(3862): {scan} scan of (87 files) in progress... Feb 05 03:24:45 root maldet(3862): {scan} scan completed on : files 87, malware hits 0, cleaned hits 0, time 35s Feb 05 03:24:45 root maldet(3862): {scan} scan report saved, to view run: maldet --report 220205-0324.3862 Feb 06 03:18:17 root maldet(4510): {update} checking for available updates... Feb 06 03:18:18 root maldet(4510): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 06 03:18:18 root maldet(4510): {update} hashing install files and checking against server... Feb 06 03:18:18 root maldet(4510): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 06 03:18:18 root maldet(4510): {update} latest version already installed. Feb 06 03:18:18 root maldet(4652): {sigup} performing signature update check... Feb 06 03:18:18 root maldet(4652): {sigup} local signature set is version 202202042503831 Feb 06 03:18:18 root maldet(4652): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 06 03:18:19 root maldet(4652): {sigup} latest signature set already installed Feb 06 03:18:19 root maldet(4776): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 06 03:18:20 root maldet(4776): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 06 03:18:20 root maldet(4776): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 06 03:18:20 root maldet(4776): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 06 03:18:20 root maldet(4776): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 06 03:33:51 root maldet(4776): {scan} file list completed in 931s, found 227 files... Feb 06 03:33:51 root maldet(4776): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 06 03:33:51 root maldet(4776): {scan} scan of (227 files) in progress... Feb 06 03:34:18 root maldet(4776): {scan} scan completed on : files 227, malware hits 0, cleaned hits 0, time 959s Feb 06 03:34:18 root maldet(4776): {scan} scan report saved, to view run: maldet --report 220206-0318.4776 Feb 07 03:48:31 root maldet(10799): {update} checking for available updates... Feb 07 03:48:31 root maldet(10799): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 07 03:48:31 root maldet(10799): {update} hashing install files and checking against server... Feb 07 03:48:31 root maldet(10799): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 07 03:48:31 root maldet(10799): {update} latest version already installed. Feb 07 03:48:32 root maldet(10933): {sigup} performing signature update check... Feb 07 03:48:32 root maldet(10933): {sigup} local signature set is version 202202042503831 Feb 07 03:48:32 root maldet(10933): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 07 03:48:32 root maldet(10933): {sigup} latest signature set already installed Feb 07 03:48:32 root maldet(11057): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 07 03:48:33 root maldet(11057): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 07 03:48:33 root maldet(11057): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 07 03:48:33 root maldet(11057): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 07 03:48:33 root maldet(11057): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 07 03:48:36 root maldet(11057): {scan} file list completed in 3s, found 121 files... Feb 07 03:48:36 root maldet(11057): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 07 03:48:36 root maldet(11057): {scan} scan of (121 files) in progress... Feb 07 03:48:41 root maldet(11057): {scan} scan completed on : files 121, malware hits 0, cleaned hits 0, time 9s Feb 07 03:48:41 root maldet(11057): {scan} scan report saved, to view run: maldet --report 220207-0348.11057 Feb 08 03:20:22 root maldet(5817): {update} checking for available updates... Feb 08 03:20:22 root maldet(5817): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 08 03:20:22 root maldet(5817): {update} hashing install files and checking against server... Feb 08 03:20:23 root maldet(5817): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 08 03:20:23 root maldet(5817): {update} latest version already installed. Feb 08 03:20:23 root maldet(5968): {sigup} performing signature update check... Feb 08 03:20:23 root maldet(5968): {sigup} local signature set is version 202202042503831 Feb 08 03:20:23 root maldet(5968): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 08 03:20:23 root maldet(5968): {sigup} new signature set 202202073179414 available Feb 08 03:20:23 root maldet(5968): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 08 03:20:23 root maldet(5968): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 08 03:20:24 root maldet(5968): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 08 03:20:24 root maldet(5968): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 08 03:20:24 root maldet(5968): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 08 03:20:24 root maldet(5968): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 08 03:20:24 root maldet(5968): {sigup} verified md5sum of maldet-sigpack.tgz Feb 08 03:20:24 root maldet(5968): {sigup} unpacked and installed maldet-sigpack.tgz Feb 08 03:20:25 root maldet(5968): {sigup} verified md5sum of maldet-clean.tgz Feb 08 03:20:25 root maldet(5968): {sigup} unpacked and installed maldet-clean.tgz Feb 08 03:20:25 root maldet(5968): {sigup} signature set update completed Feb 08 03:20:25 root maldet(5968): {sigup} 17264 signatures (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 08 03:20:25 root maldet(6212): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 08 03:20:38 root maldet(6212): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 08 03:20:38 root maldet(6212): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 08 03:20:38 root maldet(6212): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 08 03:20:38 root maldet(6212): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bhamrahfoundatio/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 08 03:20:41 root maldet(6212): {scan} file list completed in 3s, found 117 files... Feb 08 03:20:41 root maldet(6212): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 08 03:20:41 root maldet(6212): {scan} scan of (117 files) in progress... Feb 08 03:21:01 root maldet(6212): {scan} scan completed on : files 117, malware hits 0, cleaned hits 0, time 36s Feb 08 03:21:01 root maldet(6212): {scan} scan report saved, to view run: maldet --report 220208-0320.6212 Feb 09 03:39:59 root maldet(5317): {update} checking for available updates... Feb 09 03:39:59 root maldet(5317): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 09 03:39:59 root maldet(5317): {update} hashing install files and checking against server... Feb 09 03:39:59 root maldet(5317): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 09 03:40:00 root maldet(5317): {update} latest version already installed. Feb 09 03:40:00 root maldet(5454): {sigup} performing signature update check... Feb 09 03:40:00 root maldet(5454): {sigup} local signature set is version 202202073179414 Feb 09 03:40:00 root maldet(5454): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 09 03:40:00 root maldet(5454): {sigup} latest signature set already installed Feb 09 03:40:00 root maldet(5599): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 09 03:40:02 root maldet(5599): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 09 03:40:02 root maldet(5599): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 09 03:40:02 root maldet(5599): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 09 03:40:02 root maldet(5599): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 09 04:03:20 root maldet(5599): {scan} file list completed in 1398s, found 113 files... Feb 09 04:03:20 root maldet(5599): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 09 04:03:20 root maldet(5599): {scan} scan of (113 files) in progress... Feb 09 04:03:45 root maldet(5599): {scan} scan completed on : files 113, malware hits 0, cleaned hits 0, time 1425s Feb 09 04:03:45 root maldet(5599): {scan} scan report saved, to view run: maldet --report 220209-0340.5599 Feb 10 03:18:52 root maldet(32401): {update} checking for available updates... Feb 10 03:18:52 root maldet(32401): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 10 03:18:52 root maldet(32401): {update} hashing install files and checking against server... Feb 10 03:18:52 root maldet(32401): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 10 03:18:52 root maldet(32401): {update} latest version already installed. Feb 10 03:18:52 root maldet(32550): {sigup} performing signature update check... Feb 10 03:18:52 root maldet(32550): {sigup} local signature set is version 202202073179414 Feb 10 03:18:53 root maldet(32550): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 10 03:18:53 root maldet(32550): {sigup} latest signature set already installed Feb 10 03:18:53 root maldet(32662): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 10 03:18:54 root maldet(32662): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 10 03:18:54 root maldet(32662): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 10 03:18:54 root maldet(32662): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 10 03:18:54 root maldet(32662): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 10 03:18:57 root maldet(32662): {scan} file list completed in 3s, found 185 files... Feb 10 03:18:57 root maldet(32662): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 10 03:18:57 root maldet(32662): {scan} scan of (185 files) in progress... Feb 10 03:19:21 root maldet(32662): {scan} scan completed on : files 185, malware hits 0, cleaned hits 0, time 28s Feb 10 03:19:21 root maldet(32662): {scan} scan report saved, to view run: maldet --report 220210-0318.32662 Feb 11 03:21:46 root maldet(8177): {update} checking for available updates... Feb 11 03:21:46 root maldet(8177): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 11 03:21:46 root maldet(8177): {update} hashing install files and checking against server... Feb 11 03:21:47 root maldet(8177): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 11 03:21:47 root maldet(8177): {update} latest version already installed. Feb 11 03:21:47 root maldet(8314): {sigup} performing signature update check... Feb 11 03:21:47 root maldet(8314): {sigup} local signature set is version 202202073179414 Feb 11 03:21:47 root maldet(8314): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 11 03:21:47 root maldet(8314): {sigup} new signature set 202202103928843 available Feb 11 03:21:47 root maldet(8314): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 11 03:21:47 root maldet(8314): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 11 03:21:48 root maldet(8314): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 11 03:21:48 root maldet(8314): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 11 03:21:48 root maldet(8314): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 11 03:21:48 root maldet(8314): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 11 03:21:48 root maldet(8314): {sigup} verified md5sum of maldet-sigpack.tgz Feb 11 03:21:48 root maldet(8314): {sigup} unpacked and installed maldet-sigpack.tgz Feb 11 03:21:48 root maldet(8314): {sigup} verified md5sum of maldet-clean.tgz Feb 11 03:21:48 root maldet(8314): {sigup} unpacked and installed maldet-clean.tgz Feb 11 03:21:48 root maldet(8314): {sigup} signature set update completed Feb 11 03:21:48 root maldet(8314): {sigup} 17264 signatures (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 11 03:21:49 root maldet(8560): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 11 03:21:49 root maldet(8560): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 11 03:21:49 root maldet(8560): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 11 03:21:49 root maldet(8560): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 11 03:21:49 root maldet(8560): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 11 03:21:51 root maldet(8560): {scan} file list completed in 2s, found 154 files... Feb 11 03:21:51 root maldet(8560): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 11 03:21:51 root maldet(8560): {scan} scan of (154 files) in progress... Feb 11 03:22:06 root maldet(8560): {scan} scan completed on : files 154, malware hits 0, cleaned hits 0, time 17s Feb 11 03:22:06 root maldet(8560): {scan} scan report saved, to view run: maldet --report 220211-0321.8560 Feb 12 03:20:00 root maldet(18284): {update} checking for available updates... Feb 12 03:20:01 root maldet(18284): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 12 03:20:01 root maldet(18284): {update} hashing install files and checking against server... Feb 12 03:20:01 root maldet(18284): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 12 03:20:01 root maldet(18284): {update} latest version already installed. Feb 12 03:20:01 root maldet(18752): {sigup} performing signature update check... Feb 12 03:20:01 root maldet(18752): {sigup} local signature set is version 202202103928843 Feb 12 03:20:01 root maldet(18752): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 12 03:20:01 root maldet(18752): {sigup} latest signature set already installed Feb 12 03:20:01 root maldet(18962): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 12 03:20:02 root maldet(18962): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 12 03:20:02 root maldet(18962): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 12 03:20:02 root maldet(18962): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 12 03:20:02 root maldet(18962): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 12 03:20:04 root maldet(18962): {scan} file list completed in 2s, found 1402 files... Feb 12 03:20:04 root maldet(18962): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 12 03:20:04 root maldet(18962): {scan} scan of (1402 files) in progress... Feb 12 03:21:06 root maldet(18962): {scan} scan completed on : files 1402, malware hits 0, cleaned hits 0, time 65s Feb 12 03:21:06 root maldet(18962): {scan} scan report saved, to view run: maldet --report 220212-0320.18962 Feb 13 03:28:21 root maldet(21113): {update} checking for available updates... Feb 13 03:28:22 root maldet(21113): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 13 03:28:22 root maldet(21113): {update} hashing install files and checking against server... Feb 13 03:28:22 root maldet(21113): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 13 03:28:22 root maldet(21113): {update} latest version already installed. Feb 13 03:28:23 root maldet(21249): {sigup} performing signature update check... Feb 13 03:28:23 root maldet(21249): {sigup} local signature set is version 202202103928843 Feb 13 03:28:23 root maldet(21249): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 13 03:28:25 root maldet(21249): {sigup} latest signature set already installed Feb 13 03:28:25 root maldet(21435): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 13 03:28:29 root maldet(21435): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 13 03:28:29 root maldet(21435): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 13 03:28:29 root maldet(21435): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 13 03:28:29 root maldet(21435): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 13 03:43:58 root maldet(21435): {scan} file list completed in 929s, found 171 files... Feb 13 03:43:58 root maldet(21435): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 13 03:43:58 root maldet(21435): {scan} scan of (171 files) in progress... Feb 13 03:45:24 root maldet(21435): {scan} scan completed on : files 171, malware hits 0, cleaned hits 0, time 1019s Feb 13 03:45:24 root maldet(21435): {scan} scan report saved, to view run: maldet --report 220213-0328.21435 Feb 14 03:34:23 root maldet(18198): {update} checking for available updates... Feb 14 03:34:23 root maldet(18198): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 14 03:34:23 root maldet(18198): {update} hashing install files and checking against server... Feb 14 03:34:23 root maldet(18198): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 14 03:34:23 root maldet(18198): {update} latest version already installed. Feb 14 03:34:23 root maldet(18332): {sigup} performing signature update check... Feb 14 03:34:23 root maldet(18332): {sigup} local signature set is version 202202103928843 Feb 14 03:34:24 root maldet(18332): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 14 03:34:24 root maldet(18332): {sigup} new signature set 20220213409259 available Feb 14 03:34:24 root maldet(18332): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 14 03:34:24 root maldet(18332): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 14 03:34:24 root maldet(18332): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 14 03:34:24 root maldet(18332): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 14 03:34:25 root maldet(18332): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 14 03:34:25 root maldet(18332): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 14 03:34:25 root maldet(18332): {sigup} verified md5sum of maldet-sigpack.tgz Feb 14 03:34:25 root maldet(18332): {sigup} unpacked and installed maldet-sigpack.tgz Feb 14 03:34:25 root maldet(18332): {sigup} verified md5sum of maldet-clean.tgz Feb 14 03:34:25 root maldet(18332): {sigup} unpacked and installed maldet-clean.tgz Feb 14 03:34:25 root maldet(18332): {sigup} signature set update completed Feb 14 03:34:25 root maldet(18332): {sigup} 17264 signatures (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 14 03:34:25 root maldet(18574): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 14 03:34:26 root maldet(18574): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 14 03:34:26 root maldet(18574): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 14 03:34:26 root maldet(18574): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 14 03:34:26 root maldet(18574): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 14 03:34:28 root maldet(18574): {scan} file list completed in 2s, found 137 files... Feb 14 03:34:28 root maldet(18574): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 14 03:34:28 root maldet(18574): {scan} scan of (137 files) in progress... Feb 14 03:35:31 root maldet(18574): {scan} scan completed on : files 137, malware hits 0, cleaned hits 0, time 66s Feb 14 03:35:31 root maldet(18574): {scan} scan report saved, to view run: maldet --report 220214-0334.18574 Feb 15 03:38:05 root maldet(382): {update} checking for available updates... Feb 15 03:38:05 root maldet(382): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 15 03:38:05 root maldet(382): {update} hashing install files and checking against server... Feb 15 03:38:05 root maldet(382): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 15 03:38:05 root maldet(382): {update} latest version already installed. Feb 15 03:38:05 root maldet(522): {sigup} performing signature update check... Feb 15 03:38:05 root maldet(522): {sigup} local signature set is version 20220213409259 Feb 15 03:38:06 root maldet(522): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 15 03:38:06 root maldet(522): {sigup} latest signature set already installed Feb 15 03:38:06 root maldet(670): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 15 03:38:06 root maldet(670): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 15 03:38:06 root maldet(670): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 15 03:38:06 root maldet(670): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 15 03:38:06 root maldet(670): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 15 03:38:08 root maldet(670): {scan} file list completed in 2s, found 103 files... Feb 15 03:38:08 root maldet(670): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 15 03:38:08 root maldet(670): {scan} scan of (103 files) in progress... Feb 15 03:38:38 root maldet(670): {scan} scan completed on : files 103, malware hits 0, cleaned hits 0, time 32s Feb 15 03:38:38 root maldet(670): {scan} scan report saved, to view run: maldet --report 220215-0338.670 Feb 16 03:44:59 root maldet(688): {update} checking for available updates... Feb 16 03:44:59 root maldet(688): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 16 03:44:59 root maldet(688): {update} hashing install files and checking against server... Feb 16 03:45:00 root maldet(688): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 16 03:45:00 root maldet(688): {update} latest version already installed. Feb 16 03:45:00 root maldet(826): {sigup} performing signature update check... Feb 16 03:45:00 root maldet(826): {sigup} local signature set is version 20220213409259 Feb 16 03:45:00 root maldet(826): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 16 03:45:00 root maldet(826): {sigup} latest signature set already installed Feb 16 03:45:01 root maldet(940): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 16 03:45:03 root maldet(940): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 16 03:45:03 root maldet(940): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 16 03:45:03 root maldet(940): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 16 03:45:03 root maldet(940): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 16 03:59:09 root maldet(940): {scan} file list completed in 846s, found 1661 files... Feb 16 03:59:09 root maldet(940): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 16 03:59:09 root maldet(940): {scan} scan of (1661 files) in progress... Feb 16 04:01:12 root maldet(940): {scan} scan completed on : files 1661, malware hits 0, cleaned hits 0, time 971s Feb 16 04:01:12 root maldet(940): {scan} scan report saved, to view run: maldet --report 220216-0345.940 Feb 17 03:51:26 root maldet(20569): {update} checking for available updates... Feb 17 03:51:26 root maldet(20569): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 17 03:51:26 root maldet(20569): {update} hashing install files and checking against server... Feb 17 03:51:27 root maldet(20569): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 17 03:51:27 root maldet(20569): {update} latest version already installed. Feb 17 03:51:27 root maldet(20717): {sigup} performing signature update check... Feb 17 03:51:27 root maldet(20717): {sigup} local signature set is version 20220213409259 Feb 17 03:51:27 root maldet(20717): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 17 03:51:27 root maldet(20717): {sigup} new signature set 202202161088765 available Feb 17 03:51:27 root maldet(20717): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 17 03:51:27 root maldet(20717): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 17 03:51:28 root maldet(20717): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 17 03:51:28 root maldet(20717): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 17 03:51:28 root maldet(20717): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 17 03:51:28 root maldet(20717): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 17 03:51:28 root maldet(20717): {sigup} verified md5sum of maldet-sigpack.tgz Feb 17 03:51:28 root maldet(20717): {sigup} unpacked and installed maldet-sigpack.tgz Feb 17 03:51:28 root maldet(20717): {sigup} verified md5sum of maldet-clean.tgz Feb 17 03:51:28 root maldet(20717): {sigup} unpacked and installed maldet-clean.tgz Feb 17 03:51:28 root maldet(20717): {sigup} signature set update completed Feb 17 03:51:28 root maldet(20717): {sigup} 17264 signatures (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 17 03:51:28 root maldet(20960): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 17 03:51:29 root maldet(20960): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 17 03:51:29 root maldet(20960): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 17 03:51:29 root maldet(20960): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 17 03:51:29 root maldet(20960): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 17 03:51:32 root maldet(20960): {scan} file list completed in 3s, found 1254 files... Feb 17 03:51:32 root maldet(20960): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 17 03:51:32 root maldet(20960): {scan} scan of (1254 files) in progress... Feb 17 03:52:25 root maldet(20960): {scan} scan completed on : files 1254, malware hits 0, cleaned hits 0, time 57s Feb 17 03:52:25 root maldet(20960): {scan} scan report saved, to view run: maldet --report 220217-0351.20960 Feb 18 03:49:49 root maldet(19556): {update} checking for available updates... Feb 18 03:49:49 root maldet(19556): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 18 03:49:49 root maldet(19556): {update} hashing install files and checking against server... Feb 18 03:49:49 root maldet(19556): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 18 03:49:49 root maldet(19556): {update} latest version already installed. Feb 18 03:49:49 root maldet(19692): {sigup} performing signature update check... Feb 18 03:49:49 root maldet(19692): {sigup} local signature set is version 202202161088765 Feb 18 03:49:50 root maldet(19692): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 18 03:49:50 root maldet(19692): {sigup} latest signature set already installed Feb 18 03:49:50 root maldet(19803): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 18 03:49:50 root maldet(19803): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 18 03:49:50 root maldet(19803): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 18 03:49:50 root maldet(19803): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 18 03:49:50 root maldet(19803): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 18 03:49:53 root maldet(19803): {scan} file list completed in 3s, found 1449 files... Feb 18 03:49:53 root maldet(19803): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 18 03:49:53 root maldet(19803): {scan} scan of (1449 files) in progress... Feb 18 03:50:47 root maldet(19803): {scan} scan completed on : files 1449, malware hits 0, cleaned hits 0, time 57s Feb 18 03:50:47 root maldet(19803): {scan} scan report saved, to view run: maldet --report 220218-0349.19803 Feb 19 03:48:26 root maldet(1426): {update} checking for available updates... Feb 19 03:48:27 root maldet(1426): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 19 03:48:27 root maldet(1426): {update} hashing install files and checking against server... Feb 19 03:48:27 root maldet(1426): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 19 03:48:27 root maldet(1426): {update} latest version already installed. Feb 19 03:48:27 root maldet(1560): {sigup} performing signature update check... Feb 19 03:48:27 root maldet(1560): {sigup} local signature set is version 202202161088765 Feb 19 03:48:27 root maldet(1560): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 19 03:48:27 root maldet(1560): {sigup} latest signature set already installed Feb 19 03:48:28 root maldet(1671): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 19 03:48:28 root maldet(1671): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 19 03:48:28 root maldet(1671): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 19 03:48:28 root maldet(1671): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 19 03:48:28 root maldet(1671): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 19 03:48:30 root maldet(1671): {scan} file list completed in 2s, found 93 files... Feb 19 03:48:30 root maldet(1671): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 19 03:48:30 root maldet(1671): {scan} scan of (93 files) in progress... Feb 19 03:48:40 root maldet(1671): {scan} scan completed on : files 93, malware hits 0, cleaned hits 0, time 12s Feb 19 03:48:40 root maldet(1671): {scan} scan report saved, to view run: maldet --report 220219-0348.1671 Feb 20 03:22:48 root maldet(12802): {update} checking for available updates... Feb 20 03:22:49 root maldet(12802): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 20 03:22:49 root maldet(12802): {update} hashing install files and checking against server... Feb 20 03:22:49 root maldet(12802): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 20 03:22:49 root maldet(12802): {update} latest version already installed. Feb 20 03:22:49 root maldet(12942): {sigup} performing signature update check... Feb 20 03:22:49 root maldet(12942): {sigup} local signature set is version 202202161088765 Feb 20 03:22:49 root maldet(12942): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 20 03:22:49 root maldet(12942): {sigup} new signature set 202202191763792 available Feb 20 03:22:49 root maldet(12942): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 20 03:22:50 root maldet(12942): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 20 03:22:50 root maldet(12942): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 20 03:22:50 root maldet(12942): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 20 03:22:50 root maldet(12942): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 20 03:22:50 root maldet(12942): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 20 03:22:50 root maldet(12942): {sigup} verified md5sum of maldet-sigpack.tgz Feb 20 03:22:51 root maldet(12942): {sigup} unpacked and installed maldet-sigpack.tgz Feb 20 03:22:51 root maldet(12942): {sigup} verified md5sum of maldet-clean.tgz Feb 20 03:22:51 root maldet(12942): {sigup} unpacked and installed maldet-clean.tgz Feb 20 03:22:51 root maldet(12942): {sigup} signature set update completed Feb 20 03:22:51 root maldet(12942): {sigup} 17264 signatures (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 20 03:22:51 root maldet(13240): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 20 03:22:52 root maldet(13240): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 20 03:22:52 root maldet(13240): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 20 03:22:52 root maldet(13240): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 20 03:22:52 root maldet(13240): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 20 03:33:18 root maldet(13240): {scan} file list completed in 626s, found 128 files... Feb 20 03:33:18 root maldet(13240): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 20 03:33:18 root maldet(13240): {scan} scan of (128 files) in progress... Feb 20 03:33:35 root maldet(13240): {scan} scan completed on : files 128, malware hits 0, cleaned hits 0, time 644s Feb 20 03:33:36 root maldet(13240): {scan} scan report saved, to view run: maldet --report 220220-0322.13240 Feb 21 03:16:18 root maldet(7520): {update} checking for available updates... Feb 21 03:16:19 root maldet(7520): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 21 03:16:19 root maldet(7520): {update} hashing install files and checking against server... Feb 21 03:16:20 root maldet(7520): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 21 03:16:20 root maldet(7520): {update} latest version already installed. Feb 21 03:16:20 root maldet(7657): {sigup} performing signature update check... Feb 21 03:16:20 root maldet(7657): {sigup} local signature set is version 202202191763792 Feb 21 03:16:20 root maldet(7657): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 21 03:16:20 root maldet(7657): {sigup} latest signature set already installed Feb 21 03:16:21 root maldet(7768): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 21 03:16:22 root maldet(7768): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 21 03:16:22 root maldet(7768): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 21 03:16:22 root maldet(7768): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 21 03:16:22 root maldet(7768): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 21 03:16:25 root maldet(7768): {scan} file list completed in 3s, found 88 files... Feb 21 03:16:25 root maldet(7768): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 21 03:16:25 root maldet(7768): {scan} scan of (88 files) in progress... Feb 21 03:16:38 root maldet(7768): {scan} scan completed on : files 88, malware hits 0, cleaned hits 0, time 17s Feb 21 03:16:38 root maldet(7768): {scan} scan report saved, to view run: maldet --report 220221-0316.7768 Feb 22 03:39:55 root maldet(13515): {update} checking for available updates... Feb 22 03:39:55 root maldet(13515): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 22 03:39:55 root maldet(13515): {update} hashing install files and checking against server... Feb 22 03:39:56 root maldet(13515): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 22 03:39:56 root maldet(13515): {update} latest version already installed. Feb 22 03:39:56 root maldet(13650): {sigup} performing signature update check... Feb 22 03:39:56 root maldet(13650): {sigup} local signature set is version 202202191763792 Feb 22 03:39:57 root maldet(13650): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 22 03:39:57 root maldet(13650): {sigup} latest signature set already installed Feb 22 03:39:57 root maldet(13761): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 22 03:39:57 root maldet(13761): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 22 03:39:57 root maldet(13761): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 22 03:39:57 root maldet(13761): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 22 03:39:57 root maldet(13761): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 22 03:39:59 root maldet(13761): {scan} file list completed in 2s, found 1423 files... Feb 22 03:39:59 root maldet(13761): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 22 03:39:59 root maldet(13761): {scan} scan of (1423 files) in progress... Feb 22 03:41:03 root maldet(13761): {scan} scan completed on : files 1423, malware hits 0, cleaned hits 0, time 66s Feb 22 03:41:03 root maldet(13761): {scan} scan report saved, to view run: maldet --report 220222-0339.13761 Feb 23 03:28:05 root maldet(30810): {update} checking for available updates... Feb 23 03:28:06 root maldet(30810): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 23 03:28:06 root maldet(30810): {update} hashing install files and checking against server... Feb 23 03:28:07 root maldet(30810): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 23 03:28:07 root maldet(30810): {update} latest version already installed. Feb 23 03:28:07 root maldet(30980): {sigup} performing signature update check... Feb 23 03:28:07 root maldet(30980): {sigup} local signature set is version 202202191763792 Feb 23 03:28:07 root maldet(30980): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 23 03:28:07 root maldet(30980): {sigup} new signature set 202202222439842 available Feb 23 03:28:07 root maldet(30980): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 23 03:28:08 root maldet(30980): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 23 03:28:09 root maldet(30980): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 23 03:28:09 root maldet(30980): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 23 03:28:09 root maldet(30980): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 23 03:28:10 root maldet(30980): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 23 03:28:10 root maldet(30980): {sigup} verified md5sum of maldet-sigpack.tgz Feb 23 03:28:11 root maldet(30980): {sigup} unpacked and installed maldet-sigpack.tgz Feb 23 03:28:11 root maldet(30980): {sigup} verified md5sum of maldet-clean.tgz Feb 23 03:28:11 root maldet(30980): {sigup} unpacked and installed maldet-clean.tgz Feb 23 03:28:11 root maldet(30980): {sigup} signature set update completed Feb 23 03:28:11 root maldet(30980): {sigup} 17264 signatures (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 23 03:28:11 root maldet(31267): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 23 03:28:13 root maldet(31267): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 23 03:28:13 root maldet(31267): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 23 03:28:13 root maldet(31267): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 23 03:28:13 root maldet(31267): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 23 03:34:18 root maldet(31267): {scan} file list completed in 365s, found 120 files... Feb 23 03:34:18 root maldet(31267): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 23 03:34:18 root maldet(31267): {scan} scan of (120 files) in progress... Feb 23 03:34:42 root maldet(31267): {scan} scan completed on : files 120, malware hits 0, cleaned hits 0, time 390s Feb 23 03:34:42 root maldet(31267): {scan} scan report saved, to view run: maldet --report 220223-0328.31267 Feb 24 03:57:30 root maldet(13457): {update} checking for available updates... Feb 24 03:57:31 root maldet(13457): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 24 03:57:31 root maldet(13457): {update} hashing install files and checking against server... Feb 24 03:57:31 root maldet(13457): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 24 03:57:31 root maldet(13457): {update} latest version already installed. Feb 24 03:57:31 root maldet(13599): {sigup} performing signature update check... Feb 24 03:57:31 root maldet(13599): {sigup} local signature set is version 202202222439842 Feb 24 03:57:32 root maldet(13599): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 24 03:57:33 root maldet(13599): {sigup} latest signature set already installed Feb 24 03:57:33 root maldet(13715): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 24 03:57:34 root maldet(13715): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 24 03:57:34 root maldet(13715): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 24 03:57:34 root maldet(13715): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 24 03:57:34 root maldet(13715): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 24 03:57:36 root maldet(13715): {scan} file list completed in 2s, found 110 files... Feb 24 03:57:36 root maldet(13715): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 24 03:57:36 root maldet(13715): {scan} scan of (110 files) in progress... Feb 24 03:57:46 root maldet(13715): {scan} scan completed on : files 110, malware hits 0, cleaned hits 0, time 13s Feb 24 03:57:46 root maldet(13715): {scan} scan report saved, to view run: maldet --report 220224-0357.13715 Feb 25 03:34:59 root maldet(25341): {update} checking for available updates... Feb 25 03:35:00 root maldet(25341): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 25 03:35:00 root maldet(25341): {update} hashing install files and checking against server... Feb 25 03:35:00 root maldet(25341): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 25 03:35:00 root maldet(25341): {update} latest version already installed. Feb 25 03:35:00 root maldet(25477): {sigup} performing signature update check... Feb 25 03:35:00 root maldet(25477): {sigup} local signature set is version 202202222439842 Feb 25 03:35:01 root maldet(25477): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 25 03:35:01 root maldet(25477): {sigup} latest signature set already installed Feb 25 03:35:01 root maldet(25593): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 25 03:35:01 root maldet(25593): {scan} signatures loaded: 17264 (14442 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 25 03:35:01 root maldet(25593): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 25 03:35:01 root maldet(25593): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 25 03:35:01 root maldet(25593): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 25 03:35:04 root maldet(25593): {scan} file list completed in 3s, found 1447 files... Feb 25 03:35:04 root maldet(25593): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 25 03:35:04 root maldet(25593): {scan} scan of (1447 files) in progress... Feb 25 03:35:49 root maldet(25593): {scan} scan completed on : files 1447, malware hits 0, cleaned hits 0, time 48s Feb 25 03:35:49 root maldet(25593): {scan} scan report saved, to view run: maldet --report 220225-0335.25593 Feb 26 03:27:44 root maldet(23535): {update} checking for available updates... Feb 26 03:27:45 root maldet(23535): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 26 03:27:45 root maldet(23535): {update} hashing install files and checking against server... Feb 26 03:27:45 root maldet(23535): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 26 03:27:45 root maldet(23535): {update} latest version already installed. Feb 26 03:27:46 root maldet(23673): {sigup} performing signature update check... Feb 26 03:27:46 root maldet(23673): {sigup} local signature set is version 202202222439842 Feb 26 03:27:46 root maldet(23673): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 26 03:27:46 root maldet(23673): {sigup} new signature set 202202253119284 available Feb 26 03:27:46 root maldet(23673): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 26 03:27:47 root maldet(23673): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 26 03:27:48 root maldet(23673): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 26 03:27:48 root maldet(23673): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 26 03:27:48 root maldet(23673): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 26 03:27:48 root maldet(23673): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 26 03:27:49 root maldet(23673): {sigup} verified md5sum of maldet-sigpack.tgz Feb 26 03:27:49 root maldet(23673): {sigup} unpacked and installed maldet-sigpack.tgz Feb 26 03:27:49 root maldet(23673): {sigup} verified md5sum of maldet-clean.tgz Feb 26 03:27:49 root maldet(23673): {sigup} unpacked and installed maldet-clean.tgz Feb 26 03:27:49 root maldet(23673): {sigup} signature set update completed Feb 26 03:27:49 root maldet(23673): {sigup} 17271 signatures (14449 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 26 03:27:49 root maldet(23947): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 26 03:27:49 root maldet(23947): {scan} signatures loaded: 17271 (14449 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 26 03:27:49 root maldet(23947): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 26 03:27:49 root maldet(23947): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 26 03:27:49 root maldet(23947): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 26 03:27:52 root maldet(23947): {scan} file list completed in 3s, found 1243 files... Feb 26 03:27:52 root maldet(23947): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 26 03:27:52 root maldet(23947): {scan} scan of (1243 files) in progress... Feb 26 03:28:42 root maldet(23947): {scan} scan completed on : files 1243, malware hits 0, cleaned hits 0, time 53s Feb 26 03:28:42 root maldet(23947): {scan} scan report saved, to view run: maldet --report 220226-0327.23947 Feb 27 03:29:57 root maldet(14827): {update} checking for available updates... Feb 27 03:29:58 root maldet(14827): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 27 03:29:58 root maldet(14827): {update} hashing install files and checking against server... Feb 27 03:29:59 root maldet(14827): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 27 03:29:59 root maldet(14827): {update} latest version already installed. Feb 27 03:29:59 root maldet(15000): {sigup} performing signature update check... Feb 27 03:29:59 root maldet(15000): {sigup} local signature set is version 202202253119284 Feb 27 03:29:59 root maldet(15000): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 27 03:30:00 root maldet(15000): {sigup} latest signature set already installed Feb 27 03:30:00 root maldet(15179): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 27 03:30:03 root maldet(15179): {scan} signatures loaded: 17271 (14449 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 27 03:30:03 root maldet(15179): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 27 03:30:03 root maldet(15179): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 27 03:30:03 root maldet(15179): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 27 03:40:30 root maldet(15179): {scan} file list completed in 627s, found 96 files... Feb 27 03:40:30 root maldet(15179): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 27 03:40:30 root maldet(15179): {scan} scan of (96 files) in progress... Feb 27 03:41:02 root maldet(15179): {scan} scan completed on : files 96, malware hits 0, cleaned hits 0, time 662s Feb 27 03:41:02 root maldet(15179): {scan} scan report saved, to view run: maldet --report 220227-0330.15179 Feb 28 03:12:56 root maldet(12700): {update} checking for available updates... Feb 28 03:12:56 root maldet(12700): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 28 03:12:56 root maldet(12700): {update} hashing install files and checking against server... Feb 28 03:12:57 root maldet(12700): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 28 03:12:57 root maldet(12700): {update} latest version already installed. Feb 28 03:12:57 root maldet(12835): {sigup} performing signature update check... Feb 28 03:12:57 root maldet(12835): {sigup} local signature set is version 202202253119284 Feb 28 03:12:58 root maldet(12835): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 28 03:12:58 root maldet(12835): {sigup} latest signature set already installed Feb 28 03:12:58 root maldet(12947): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 28 03:12:59 root maldet(12947): {scan} signatures loaded: 17271 (14449 MD5 | 2039 HEX | 783 YARA | 0 USER) Feb 28 03:12:59 root maldet(12947): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 28 03:12:59 root maldet(12947): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 28 03:12:59 root maldet(12947): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 28 03:13:01 root maldet(12947): {scan} file list completed in 2s, found 74 files... Feb 28 03:13:01 root maldet(12947): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 28 03:13:01 root maldet(12947): {scan} scan of (74 files) in progress... Feb 28 03:13:11 root maldet(12947): {scan} scan completed on : files 74, malware hits 0, cleaned hits 0, time 13s Feb 28 03:13:11 root maldet(12947): {scan} scan report saved, to view run: maldet --report 220228-0312.12947 Mar 01 03:49:09 root maldet(10175): {update} checking for available updates... Mar 01 03:49:10 root maldet(10175): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 01 03:49:10 root maldet(10175): {update} hashing install files and checking against server... Mar 01 03:49:10 root maldet(10175): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 01 03:49:10 root maldet(10175): {update} latest version already installed. Mar 01 03:49:10 root maldet(10316): {sigup} performing signature update check... Mar 01 03:49:10 root maldet(10316): {sigup} local signature set is version 202202253119284 Mar 01 03:49:11 root maldet(10316): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 01 03:49:11 root maldet(10316): {sigup} new signature set 202202283804324 available Mar 01 03:49:11 root maldet(10316): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 01 03:49:12 root maldet(10316): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 01 03:49:13 root maldet(10316): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 01 03:49:13 root maldet(10316): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 01 03:49:13 root maldet(10316): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 01 03:49:14 root maldet(10316): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 01 03:49:14 root maldet(10316): {sigup} verified md5sum of maldet-sigpack.tgz Mar 01 03:49:14 root maldet(10316): {sigup} unpacked and installed maldet-sigpack.tgz Mar 01 03:49:15 root maldet(10316): {sigup} verified md5sum of maldet-clean.tgz Mar 01 03:49:15 root maldet(10316): {sigup} unpacked and installed maldet-clean.tgz Mar 01 03:49:15 root maldet(10316): {sigup} signature set update completed Mar 01 03:49:15 root maldet(10316): {sigup} 17271 signatures (14449 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 01 03:49:15 root maldet(10566): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 01 03:49:17 root maldet(10566): {scan} signatures loaded: 17271 (14449 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 01 03:49:17 root maldet(10566): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 01 03:49:17 root maldet(10566): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 01 03:49:17 root maldet(10566): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 01 03:58:29 root maldet(10566): {scan} file list completed in 552s, found 85 files... Mar 01 03:58:29 root maldet(10566): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 01 03:58:29 root maldet(10566): {scan} scan of (85 files) in progress... Mar 01 03:58:48 root maldet(10566): {scan} scan completed on : files 85, malware hits 0, cleaned hits 0, time 573s Mar 01 03:58:48 root maldet(10566): {scan} scan report saved, to view run: maldet --report 220301-0349.10566 Mar 02 03:21:47 root maldet(8486): {update} checking for available updates... Mar 02 03:21:48 root maldet(8486): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 02 03:21:48 root maldet(8486): {update} hashing install files and checking against server... Mar 02 03:21:48 root maldet(8486): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 02 03:21:48 root maldet(8486): {update} latest version already installed. Mar 02 03:21:48 root maldet(8626): {sigup} performing signature update check... Mar 02 03:21:48 root maldet(8626): {sigup} local signature set is version 202202283804324 Mar 02 03:21:49 root maldet(8626): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 02 03:21:49 root maldet(8626): {sigup} new signature set 20220301242728 available Mar 02 03:21:49 root maldet(8626): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 02 03:21:50 root maldet(8626): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 02 03:21:51 root maldet(8626): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 02 03:21:51 root maldet(8626): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 02 03:21:51 root maldet(8626): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 02 03:21:52 root maldet(8626): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 02 03:21:52 root maldet(8626): {sigup} verified md5sum of maldet-sigpack.tgz Mar 02 03:21:53 root maldet(8626): {sigup} unpacked and installed maldet-sigpack.tgz Mar 02 03:21:53 root maldet(8626): {sigup} verified md5sum of maldet-clean.tgz Mar 02 03:21:53 root maldet(8626): {sigup} unpacked and installed maldet-clean.tgz Mar 02 03:21:54 root maldet(8626): {sigup} signature set update completed Mar 02 03:21:54 root maldet(8626): {sigup} 17271 signatures (14449 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 02 03:21:54 root maldet(8890): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 02 03:21:58 root maldet(8890): {scan} signatures loaded: 17271 (14449 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 02 03:21:58 root maldet(8890): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 02 03:21:58 root maldet(8890): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 02 03:21:58 root maldet(8890): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 02 03:40:00 root maldet(8890): {scan} file list completed in 1082s, found 1269 files... Mar 02 03:40:00 root maldet(8890): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 02 03:40:00 root maldet(8890): {scan} scan of (1269 files) in progress... Mar 02 03:41:31 root maldet(8890): {scan} scan completed on : files 1269, malware hits 0, cleaned hits 0, time 1177s Mar 02 03:41:31 root maldet(8890): {scan} scan report saved, to view run: maldet --report 220302-0321.8890 Mar 03 03:46:17 root maldet(8481): {update} checking for available updates... Mar 03 03:46:18 root maldet(8481): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 03 03:46:18 root maldet(8481): {update} hashing install files and checking against server... Mar 03 03:46:18 root maldet(8481): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 03 03:46:18 root maldet(8481): {update} latest version already installed. Mar 03 03:46:18 root maldet(8626): {sigup} performing signature update check... Mar 03 03:46:18 root maldet(8626): {sigup} local signature set is version 20220301242728 Mar 03 03:46:19 root maldet(8626): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 03 03:46:19 root maldet(8626): {sigup} latest signature set already installed Mar 03 03:46:19 root maldet(8741): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 03 03:46:20 root maldet(8741): {scan} signatures loaded: 17271 (14449 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 03 03:46:20 root maldet(8741): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 03 03:46:20 root maldet(8741): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 03 03:46:20 root maldet(8741): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 03 03:46:22 root maldet(8741): {scan} file list completed in 2s, found 6173 files... Mar 03 03:46:22 root maldet(8741): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 03 03:46:22 root maldet(8741): {scan} scan of (6173 files) in progress... Mar 03 03:47:03 root maldet(8741): {scan} scan completed on : files 6173, malware hits 0, cleaned hits 0, time 44s Mar 03 03:47:03 root maldet(8741): {scan} scan report saved, to view run: maldet --report 220303-0346.8741 Mar 04 03:41:31 root maldet(6678): {update} checking for available updates... Mar 04 03:41:32 root maldet(6678): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 04 03:41:32 root maldet(6678): {update} hashing install files and checking against server... Mar 04 03:41:32 root maldet(6678): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 04 03:41:32 root maldet(6678): {update} latest version already installed. Mar 04 03:41:32 root maldet(6818): {sigup} performing signature update check... Mar 04 03:41:32 root maldet(6818): {sigup} local signature set is version 20220301242728 Mar 04 03:41:33 root maldet(6818): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 04 03:41:33 root maldet(6818): {sigup} latest signature set already installed Mar 04 03:41:33 root maldet(6930): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 04 03:41:33 root maldet(6930): {scan} signatures loaded: 17271 (14449 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 04 03:41:33 root maldet(6930): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 04 03:41:33 root maldet(6930): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 04 03:41:33 root maldet(6930): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 04 03:41:36 root maldet(6930): {scan} file list completed in 3s, found 10405 files... Mar 04 03:41:36 root maldet(6930): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 04 03:41:36 root maldet(6930): {scan} scan of (10405 files) in progress... Mar 04 03:43:01 root maldet(6930): {scan} scan completed on : files 10405, malware hits 0, cleaned hits 0, time 88s Mar 04 03:43:01 root maldet(6930): {scan} scan report saved, to view run: maldet --report 220304-0341.6930 Mar 05 03:51:37 root maldet(26794): {update} checking for available updates... Mar 05 03:51:37 root maldet(26794): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 05 03:51:37 root maldet(26794): {update} hashing install files and checking against server... Mar 05 03:51:38 root maldet(26794): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 05 03:51:38 root maldet(26794): {update} latest version already installed. Mar 05 03:51:38 root maldet(26940): {sigup} performing signature update check... Mar 05 03:51:38 root maldet(26940): {sigup} local signature set is version 20220301242728 Mar 05 03:51:39 root maldet(26940): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 05 03:51:39 root maldet(26940): {sigup} new signature set 20220304919040 available Mar 05 03:51:39 root maldet(26940): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 05 03:51:40 root maldet(26940): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 05 03:51:40 root maldet(26940): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 05 03:51:40 root maldet(26940): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 05 03:51:41 root maldet(26940): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 05 03:51:41 root maldet(26940): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 05 03:51:41 root maldet(26940): {sigup} verified md5sum of maldet-sigpack.tgz Mar 05 03:51:41 root maldet(26940): {sigup} unpacked and installed maldet-sigpack.tgz Mar 05 03:51:41 root maldet(26940): {sigup} verified md5sum of maldet-clean.tgz Mar 05 03:51:41 root maldet(26940): {sigup} unpacked and installed maldet-clean.tgz Mar 05 03:51:41 root maldet(26940): {sigup} signature set update completed Mar 05 03:51:41 root maldet(26940): {sigup} 17271 signatures (14449 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 05 03:51:41 root maldet(27181): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 05 03:51:42 root maldet(27181): {scan} signatures loaded: 17271 (14449 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 05 03:51:42 root maldet(27181): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 05 03:51:42 root maldet(27181): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 05 03:51:42 root maldet(27181): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 05 03:51:44 root maldet(27181): {scan} file list completed in 2s, found 94 files... Mar 05 03:51:44 root maldet(27181): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 05 03:51:44 root maldet(27181): {scan} scan of (94 files) in progress... Mar 05 03:51:52 root maldet(27181): {scan} scan completed on : files 94, malware hits 0, cleaned hits 0, time 11s Mar 05 03:51:52 root maldet(27181): {scan} scan report saved, to view run: maldet --report 220305-0351.27181 Mar 06 03:43:50 root maldet(7287): {update} checking for available updates... Mar 06 03:43:51 root maldet(7287): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 06 03:43:51 root maldet(7287): {update} hashing install files and checking against server... Mar 06 03:43:51 root maldet(7287): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 06 03:43:51 root maldet(7287): {update} latest version already installed. Mar 06 03:43:51 root maldet(7432): {sigup} performing signature update check... Mar 06 03:43:51 root maldet(7432): {sigup} local signature set is version 20220304919040 Mar 06 03:43:52 root maldet(7432): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 06 03:43:52 root maldet(7432): {sigup} latest signature set already installed Mar 06 03:43:52 root maldet(7546): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 06 03:43:54 root maldet(7546): {scan} signatures loaded: 17271 (14449 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 06 03:43:54 root maldet(7546): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 06 03:43:54 root maldet(7546): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 06 03:43:54 root maldet(7546): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 06 04:03:33 root maldet(7546): {scan} file list completed in 1179s, found 22114 files... Mar 06 04:03:33 root maldet(7546): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 06 04:03:33 root maldet(7546): {scan} scan of (22114 files) in progress... Mar 06 04:07:51 root maldet(7546): {scan} scan completed on : files 22114, malware hits 0, cleaned hits 0, time 1439s Mar 06 04:07:51 root maldet(7546): {scan} scan report saved, to view run: maldet --report 220306-0343.7546 Mar 07 03:55:03 root maldet(17908): {update} checking for available updates... Mar 07 03:55:04 root maldet(17908): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 07 03:55:04 root maldet(17908): {update} hashing install files and checking against server... Mar 07 03:55:04 root maldet(17908): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 07 03:55:04 root maldet(17908): {update} latest version already installed. Mar 07 03:55:05 root maldet(18066): {sigup} performing signature update check... Mar 07 03:55:05 root maldet(18066): {sigup} local signature set is version 20220304919040 Mar 07 03:55:05 root maldet(18066): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 07 03:55:05 root maldet(18066): {sigup} latest signature set already installed Mar 07 03:55:05 root maldet(18182): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 07 03:55:06 root maldet(18182): {scan} signatures loaded: 17271 (14449 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 07 03:55:06 root maldet(18182): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 07 03:55:06 root maldet(18182): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 07 03:55:06 root maldet(18182): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 07 03:55:10 root maldet(18182): {scan} file list completed in 4s, found 987 files... Mar 07 03:55:10 root maldet(18182): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 07 03:55:10 root maldet(18182): {scan} scan of (987 files) in progress... Mar 07 03:55:35 root maldet(18182): {scan} scan completed on : files 987, malware hits 0, cleaned hits 0, time 30s Mar 07 03:55:35 root maldet(18182): {scan} scan report saved, to view run: maldet --report 220307-0355.18182 Mar 08 03:23:42 root maldet(4301): {update} checking for available updates... Mar 08 03:23:43 root maldet(4301): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 08 03:23:43 root maldet(4301): {update} hashing install files and checking against server... Mar 08 03:23:43 root maldet(4301): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 08 03:23:43 root maldet(4301): {update} latest version already installed. Mar 08 03:23:44 root maldet(4446): {sigup} performing signature update check... Mar 08 03:23:44 root maldet(4446): {sigup} local signature set is version 20220304919040 Mar 08 03:23:44 root maldet(4446): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 08 03:23:44 root maldet(4446): {sigup} new signature set 202203071599344 available Mar 08 03:23:44 root maldet(4446): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 08 03:23:45 root maldet(4446): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 08 03:23:46 root maldet(4446): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 08 03:23:46 root maldet(4446): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 08 03:23:46 root maldet(4446): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 08 03:23:47 root maldet(4446): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 08 03:23:47 root maldet(4446): {sigup} verified md5sum of maldet-sigpack.tgz Mar 08 03:23:47 root maldet(4446): {sigup} unpacked and installed maldet-sigpack.tgz Mar 08 03:23:47 root maldet(4446): {sigup} verified md5sum of maldet-clean.tgz Mar 08 03:23:47 root maldet(4446): {sigup} unpacked and installed maldet-clean.tgz Mar 08 03:23:47 root maldet(4446): {sigup} signature set update completed Mar 08 03:23:47 root maldet(4446): {sigup} 17271 signatures (14449 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 08 03:23:47 root maldet(4713): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 08 03:23:47 root maldet(4713): {scan} signatures loaded: 17271 (14449 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 08 03:23:47 root maldet(4713): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 08 03:23:47 root maldet(4713): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 08 03:23:47 root maldet(4713): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 08 03:23:50 root maldet(4713): {scan} file list completed in 3s, found 6255 files... Mar 08 03:23:50 root maldet(4713): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 08 03:23:50 root maldet(4713): {scan} scan of (6255 files) in progress... Mar 08 03:25:26 root maldet(4713): {hit} malware hit {HEX}php.nested.base64.637 found for /home/mahabirconstruct/public_html/css/load.php Mar 08 03:25:26 root maldet(4713): {quar} malware quarantined from '/home/mahabirconstruct/public_html/css/load.php' to '/usr/local/maldetect/quarantine/load.php.90051254' Mar 08 03:25:26 root maldet(4713): {scan} scan completed on : files 6255, malware hits 1, cleaned hits 0, time 99s Mar 08 03:25:26 root maldet(4713): {scan} scan report saved, to view run: maldet --report 220308-0323.4713 Mar 09 03:51:37 root maldet(31074): {update} checking for available updates... Mar 09 03:51:38 root maldet(31074): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 09 03:51:38 root maldet(31074): {update} hashing install files and checking against server... Mar 09 03:51:38 root maldet(31074): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 09 03:51:38 root maldet(31074): {update} latest version already installed. Mar 09 03:51:38 root maldet(31255): {sigup} performing signature update check... Mar 09 03:51:38 root maldet(31255): {sigup} local signature set is version 202203071599344 Mar 09 03:51:39 root maldet(31255): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 09 03:51:39 root maldet(31255): {sigup} latest signature set already installed Mar 09 03:51:39 root maldet(31397): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 09 03:51:43 root maldet(31397): {scan} signatures loaded: 17271 (14449 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 09 03:51:43 root maldet(31397): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 09 03:51:43 root maldet(31397): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 09 03:51:43 root maldet(31397): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 09 04:07:53 root maldet(31397): {scan} file list completed in 970s, found 22207 files... Mar 09 04:07:53 root maldet(31397): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 09 04:07:53 root maldet(31397): {scan} scan of (22207 files) in progress... Mar 09 04:10:14 root maldet(31397): {scan} scan completed on : files 22207, malware hits 0, cleaned hits 0, time 1115s Mar 09 04:10:14 root maldet(31397): {scan} scan report saved, to view run: maldet --report 220309-0351.31397 Mar 10 03:32:06 root maldet(13215): {update} checking for available updates... Mar 10 03:32:07 root maldet(13215): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 10 03:32:07 root maldet(13215): {update} hashing install files and checking against server... Mar 10 03:32:07 root maldet(13215): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 10 03:32:07 root maldet(13215): {update} latest version already installed. Mar 10 03:32:07 root maldet(13351): {sigup} performing signature update check... Mar 10 03:32:07 root maldet(13351): {sigup} local signature set is version 202203071599344 Mar 10 03:32:08 root maldet(13351): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 10 03:32:08 root maldet(13351): {sigup} latest signature set already installed Mar 10 03:32:08 root maldet(13474): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 10 03:32:09 root maldet(13474): {scan} signatures loaded: 17271 (14449 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 10 03:32:09 root maldet(13474): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 10 03:32:09 root maldet(13474): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 10 03:32:09 root maldet(13474): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 10 03:32:12 root maldet(13474): {scan} file list completed in 3s, found 99 files... Mar 10 03:32:12 root maldet(13474): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 10 03:32:12 root maldet(13474): {scan} scan of (99 files) in progress... Mar 10 03:32:42 root maldet(13474): {scan} scan completed on : files 99, malware hits 0, cleaned hits 0, time 34s Mar 10 03:32:42 root maldet(13474): {scan} scan report saved, to view run: maldet --report 220310-0332.13474 Mar 11 03:32:14 root maldet(20298): {update} checking for available updates... Mar 11 03:32:15 root maldet(20298): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 11 03:32:15 root maldet(20298): {update} hashing install files and checking against server... Mar 11 03:32:15 root maldet(20298): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 11 03:32:15 root maldet(20298): {update} latest version already installed. Mar 11 03:32:16 root maldet(20457): {sigup} performing signature update check... Mar 11 03:32:16 root maldet(20457): {sigup} local signature set is version 202203071599344 Mar 11 03:32:16 root maldet(20457): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 11 03:32:16 root maldet(20457): {sigup} new signature set 202203102277708 available Mar 11 03:32:16 root maldet(20457): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 11 03:32:17 root maldet(20457): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 11 03:32:18 root maldet(20457): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 11 03:32:18 root maldet(20457): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 11 03:32:18 root maldet(20457): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 11 03:32:18 root maldet(20457): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 11 03:32:18 root maldet(20457): {sigup} verified md5sum of maldet-sigpack.tgz Mar 11 03:32:19 root maldet(20457): {sigup} unpacked and installed maldet-sigpack.tgz Mar 11 03:32:19 root maldet(20457): {sigup} verified md5sum of maldet-clean.tgz Mar 11 03:32:19 root maldet(20457): {sigup} unpacked and installed maldet-clean.tgz Mar 11 03:32:19 root maldet(20457): {sigup} signature set update completed Mar 11 03:32:19 root maldet(20457): {sigup} 17271 signatures (14449 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 11 03:32:19 root maldet(20769): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 11 03:32:19 root maldet(20769): {scan} signatures loaded: 17271 (14449 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 11 03:32:19 root maldet(20769): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 11 03:32:19 root maldet(20769): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 11 03:32:19 root maldet(20769): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 11 03:32:22 root maldet(20769): {scan} file list completed in 3s, found 171 files... Mar 11 03:32:22 root maldet(20769): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 11 03:32:22 root maldet(20769): {scan} scan of (171 files) in progress... Mar 11 03:32:57 root maldet(20769): {scan} scan completed on : files 171, malware hits 0, cleaned hits 0, time 38s Mar 11 03:32:57 root maldet(20769): {scan} scan report saved, to view run: maldet --report 220311-0332.20769 Mar 12 03:31:33 root maldet(4750): {update} checking for available updates... Mar 12 03:31:34 root maldet(4750): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 12 03:31:34 root maldet(4750): {update} hashing install files and checking against server... Mar 12 03:31:34 root maldet(4750): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 12 03:31:34 root maldet(4750): {update} latest version already installed. Mar 12 03:31:34 root maldet(4886): {sigup} performing signature update check... Mar 12 03:31:34 root maldet(4886): {sigup} local signature set is version 202203102277708 Mar 12 03:31:35 root maldet(4886): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 12 03:31:35 root maldet(4886): {sigup} latest signature set already installed Mar 12 03:31:35 root maldet(5000): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 12 03:31:35 root maldet(5000): {scan} signatures loaded: 17271 (14449 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 12 03:31:35 root maldet(5000): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 12 03:31:35 root maldet(5000): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 12 03:31:35 root maldet(5000): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 12 03:31:38 root maldet(5000): {scan} file list completed in 3s, found 197 files... Mar 12 03:31:38 root maldet(5000): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 12 03:31:38 root maldet(5000): {scan} scan of (197 files) in progress... Mar 12 03:32:05 root maldet(5000): {scan} scan completed on : files 197, malware hits 0, cleaned hits 0, time 30s Mar 12 03:32:05 root maldet(5000): {scan} scan report saved, to view run: maldet --report 220312-0331.5000 Mar 13 03:39:31 root maldet(26652): {update} checking for available updates... Mar 13 03:39:31 root maldet(26652): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 13 03:39:31 root maldet(26652): {update} hashing install files and checking against server... Mar 13 03:39:32 root maldet(26652): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 13 03:39:32 root maldet(26652): {update} latest version already installed. Mar 13 03:39:32 root maldet(26825): {sigup} performing signature update check... Mar 13 03:39:32 root maldet(26825): {sigup} local signature set is version 202203102277708 Mar 13 03:39:32 root maldet(26825): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 13 03:39:32 root maldet(26825): {sigup} latest signature set already installed Mar 13 03:39:32 root maldet(26958): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 13 03:39:34 root maldet(26958): {scan} signatures loaded: 17271 (14449 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 13 03:39:34 root maldet(26958): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 13 03:39:34 root maldet(26958): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 13 03:39:34 root maldet(26958): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 13 03:40:29 root maldet(26958): {scan} file list completed in 55s, found 136 files... Mar 13 03:40:29 root maldet(26958): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 13 03:40:29 root maldet(26958): {scan} scan of (136 files) in progress... Mar 13 03:42:11 root maldet(26958): {scan} scan completed on : files 136, malware hits 0, cleaned hits 0, time 159s Mar 13 03:42:11 root maldet(26958): {scan} scan report saved, to view run: maldet --report 220313-0339.26958 Mar 14 03:28:21 root maldet(8133): {update} checking for available updates... Mar 14 03:28:22 root maldet(8133): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 14 03:28:22 root maldet(8133): {update} hashing install files and checking against server... Mar 14 03:28:22 root maldet(8133): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 14 03:28:22 root maldet(8133): {update} latest version already installed. Mar 14 03:28:22 root maldet(8283): {sigup} performing signature update check... Mar 14 03:28:22 root maldet(8283): {sigup} local signature set is version 202203102277708 Mar 14 03:28:23 root maldet(8283): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 14 03:28:23 root maldet(8283): {sigup} new signature set 202203132957831 available Mar 14 03:28:23 root maldet(8283): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 14 03:28:24 root maldet(8283): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 14 03:28:24 root maldet(8283): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 14 03:28:24 root maldet(8283): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 14 03:28:25 root maldet(8283): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 14 03:28:25 root maldet(8283): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 14 03:28:25 root maldet(8283): {sigup} verified md5sum of maldet-sigpack.tgz Mar 14 03:28:25 root maldet(8283): {sigup} unpacked and installed maldet-sigpack.tgz Mar 14 03:28:26 root maldet(8283): {sigup} verified md5sum of maldet-clean.tgz Mar 14 03:28:26 root maldet(8283): {sigup} unpacked and installed maldet-clean.tgz Mar 14 03:28:26 root maldet(8283): {sigup} signature set update completed Mar 14 03:28:26 root maldet(8283): {sigup} 17271 signatures (14449 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 14 03:28:26 root maldet(8548): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 14 03:28:27 root maldet(8548): {scan} signatures loaded: 17271 (14449 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 14 03:28:27 root maldet(8548): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 14 03:28:27 root maldet(8548): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 14 03:28:27 root maldet(8548): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 14 03:28:29 root maldet(8548): {scan} file list completed in 2s, found 109 files... Mar 14 03:28:29 root maldet(8548): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 14 03:28:29 root maldet(8548): {scan} scan of (109 files) in progress... Mar 14 03:28:53 root maldet(8548): {scan} scan completed on : files 109, malware hits 0, cleaned hits 0, time 27s Mar 14 03:28:53 root maldet(8548): {scan} scan report saved, to view run: maldet --report 220314-0328.8548 Mar 15 03:48:58 root maldet(3611): {update} checking for available updates... Mar 15 03:48:58 root maldet(3611): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 15 03:48:58 root maldet(3611): {update} hashing install files and checking against server... Mar 15 03:48:59 root maldet(3611): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 15 03:48:59 root maldet(3611): {update} latest version already installed. Mar 15 03:48:59 root maldet(3749): {sigup} performing signature update check... Mar 15 03:48:59 root maldet(3749): {sigup} local signature set is version 202203132957831 Mar 15 03:49:00 root maldet(3749): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 15 03:49:00 root maldet(3749): {sigup} latest signature set already installed Mar 15 03:49:00 root maldet(3861): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 15 03:49:00 root maldet(3861): {scan} signatures loaded: 17271 (14449 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 15 03:49:00 root maldet(3861): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 15 03:49:00 root maldet(3861): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 15 03:49:00 root maldet(3861): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 15 03:49:03 root maldet(3861): {scan} file list completed in 3s, found 23265 files... Mar 15 03:49:03 root maldet(3861): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 15 03:49:03 root maldet(3861): {scan} scan of (23265 files) in progress... Mar 15 03:50:37 root maldet(3861): {scan} scan completed on : files 23265, malware hits 0, cleaned hits 0, time 97s Mar 15 03:50:37 root maldet(3861): {scan} scan report saved, to view run: maldet --report 220315-0349.3861 Mar 16 03:51:59 root maldet(6725): {update} checking for available updates... Mar 16 03:52:00 root maldet(6725): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 16 03:52:00 root maldet(6725): {update} hashing install files and checking against server... Mar 16 03:52:00 root maldet(6725): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 16 03:52:00 root maldet(6725): {update} latest version already installed. Mar 16 03:52:00 root maldet(6984): {sigup} performing signature update check... Mar 16 03:52:00 root maldet(6984): {sigup} local signature set is version 202203132957831 Mar 16 03:52:01 root maldet(6984): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 16 03:52:01 root maldet(6984): {sigup} latest signature set already installed Mar 16 03:52:01 root maldet(7136): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 16 03:52:02 root maldet(7136): {scan} signatures loaded: 17271 (14449 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 16 03:52:02 root maldet(7136): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 16 03:52:02 root maldet(7136): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 16 03:52:02 root maldet(7136): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 16 04:03:43 root maldet(7136): {scan} file list completed in 701s, found 7099 files... Mar 16 04:03:43 root maldet(7136): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 16 04:03:43 root maldet(7136): {scan} scan of (7099 files) in progress... Mar 16 04:05:26 root maldet(7136): {scan} scan completed on : files 7099, malware hits 0, cleaned hits 0, time 805s Mar 16 04:05:26 root maldet(7136): {scan} scan report saved, to view run: maldet --report 220316-0352.7136 Mar 17 03:16:31 root maldet(11215): {update} checking for available updates... Mar 17 03:16:32 root maldet(11215): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 17 03:16:32 root maldet(11215): {update} hashing install files and checking against server... Mar 17 03:16:32 root maldet(11215): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 17 03:16:32 root maldet(11215): {update} latest version already installed. Mar 17 03:16:32 root maldet(11356): {sigup} performing signature update check... Mar 17 03:16:32 root maldet(11356): {sigup} local signature set is version 202203132957831 Mar 17 03:16:33 root maldet(11356): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 17 03:16:33 root maldet(11356): {sigup} new signature set 202203163680884 available Mar 17 03:16:33 root maldet(11356): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 17 03:16:34 root maldet(11356): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 17 03:16:34 root maldet(11356): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 17 03:16:34 root maldet(11356): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 17 03:16:35 root maldet(11356): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 17 03:16:35 root maldet(11356): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 17 03:16:35 root maldet(11356): {sigup} verified md5sum of maldet-sigpack.tgz Mar 17 03:16:35 root maldet(11356): {sigup} unpacked and installed maldet-sigpack.tgz Mar 17 03:16:36 root maldet(11356): {sigup} verified md5sum of maldet-clean.tgz Mar 17 03:16:36 root maldet(11356): {sigup} unpacked and installed maldet-clean.tgz Mar 17 03:16:36 root maldet(11356): {sigup} signature set update completed Mar 17 03:16:36 root maldet(11356): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 17 03:16:36 root maldet(11605): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 17 03:16:36 root maldet(11605): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 17 03:16:36 root maldet(11605): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 17 03:16:36 root maldet(11605): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 17 03:16:36 root maldet(11605): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 17 03:16:39 root maldet(11605): {scan} file list completed in 3s, found 22225 files... Mar 17 03:16:39 root maldet(11605): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 17 03:16:39 root maldet(11605): {scan} scan of (22225 files) in progress... Mar 17 03:17:44 root maldet(11605): {scan} scan completed on : files 22225, malware hits 0, cleaned hits 0, time 68s Mar 17 03:17:44 root maldet(11605): {scan} scan report saved, to view run: maldet --report 220317-0316.11605 Mar 18 03:11:57 root maldet(11730): {update} checking for available updates... Mar 18 03:11:57 root maldet(11730): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 18 03:11:57 root maldet(11730): {update} hashing install files and checking against server... Mar 18 03:11:57 root maldet(11730): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 18 03:11:57 root maldet(11730): {update} latest version already installed. Mar 18 03:11:57 root maldet(11880): {sigup} performing signature update check... Mar 18 03:11:57 root maldet(11880): {sigup} local signature set is version 202203163680884 Mar 18 03:11:58 root maldet(11880): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 18 03:11:58 root maldet(11880): {sigup} latest signature set already installed Mar 18 03:11:58 root maldet(11999): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 18 03:11:58 root maldet(11999): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 18 03:11:58 root maldet(11999): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 18 03:11:58 root maldet(11999): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 18 03:11:58 root maldet(11999): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 18 03:12:01 root maldet(11999): {scan} file list completed in 3s, found 6350 files... Mar 18 03:12:01 root maldet(11999): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 18 03:12:01 root maldet(11999): {scan} scan of (6350 files) in progress... Mar 18 03:12:34 root maldet(11999): {scan} scan completed on : files 6350, malware hits 0, cleaned hits 0, time 36s Mar 18 03:12:34 root maldet(11999): {scan} scan report saved, to view run: maldet --report 220318-0311.11999 Mar 19 03:25:54 root maldet(11560): {update} checking for available updates... Mar 19 03:25:55 root maldet(11560): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 19 03:25:55 root maldet(11560): {update} hashing install files and checking against server... Mar 19 03:25:55 root maldet(11560): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 19 03:25:55 root maldet(11560): {update} latest version already installed. Mar 19 03:25:55 root maldet(11697): {sigup} performing signature update check... Mar 19 03:25:55 root maldet(11697): {sigup} local signature set is version 202203163680884 Mar 19 03:25:56 root maldet(11697): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 19 03:25:56 root maldet(11697): {sigup} latest signature set already installed Mar 19 03:25:56 root maldet(11817): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 19 03:25:56 root maldet(11817): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 19 03:25:56 root maldet(11817): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 19 03:25:56 root maldet(11817): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 19 03:25:56 root maldet(11817): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 19 03:25:59 root maldet(11817): {scan} file list completed in 3s, found 20090 files... Mar 19 03:25:59 root maldet(11817): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 19 03:25:59 root maldet(11817): {scan} scan of (20090 files) in progress... Mar 19 03:26:44 root maldet(11817): {scan} scan completed on : files 20090, malware hits 0, cleaned hits 0, time 48s Mar 19 03:26:44 root maldet(11817): {scan} scan report saved, to view run: maldet --report 220319-0325.11817 Mar 20 03:22:19 root maldet(30622): {update} checking for available updates... Mar 20 03:22:20 root maldet(30622): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 20 03:22:20 root maldet(30622): {update} hashing install files and checking against server... Mar 20 03:22:21 root maldet(30622): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 20 03:22:21 root maldet(30622): {update} latest version already installed. Mar 20 03:22:22 root maldet(30793): {sigup} performing signature update check... Mar 20 03:22:22 root maldet(30793): {sigup} local signature set is version 202203163680884 Mar 20 03:22:23 root maldet(30793): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 20 03:22:23 root maldet(30793): {sigup} new signature set 20220319164557 available Mar 20 03:22:23 root maldet(30793): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 20 03:22:25 root maldet(30793): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 20 03:22:25 root maldet(30793): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 20 03:22:25 root maldet(30793): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 20 03:22:26 root maldet(30793): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 20 03:22:26 root maldet(30793): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 20 03:22:26 root maldet(30793): {sigup} verified md5sum of maldet-sigpack.tgz Mar 20 03:22:29 root maldet(30793): {sigup} unpacked and installed maldet-sigpack.tgz Mar 20 03:22:30 root maldet(30793): {sigup} verified md5sum of maldet-clean.tgz Mar 20 03:22:30 root maldet(30793): {sigup} unpacked and installed maldet-clean.tgz Mar 20 03:22:30 root maldet(30793): {sigup} signature set update completed Mar 20 03:22:30 root maldet(30793): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 20 03:22:30 root maldet(31146): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 20 03:22:30 root maldet(31146): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 20 03:22:30 root maldet(31146): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 20 03:22:30 root maldet(31146): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 20 03:22:30 root maldet(31146): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 20 03:28:30 root maldet(31146): {scan} file list completed in 360s, found 22195 files... Mar 20 03:28:30 root maldet(31146): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 20 03:28:30 root maldet(31146): {scan} scan of (22195 files) in progress... Mar 20 03:35:13 root maldet(31146): {scan} scan completed on : files 22195, malware hits 0, cleaned hits 0, time 763s Mar 20 03:35:13 root maldet(31146): {scan} scan report saved, to view run: maldet --report 220320-0322.31146 Mar 21 03:14:06 root maldet(14804): {update} checking for available updates... Mar 21 03:14:07 root maldet(14804): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 21 03:14:07 root maldet(14804): {update} hashing install files and checking against server... Mar 21 03:14:08 root maldet(14804): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 21 03:14:08 root maldet(14804): {update} latest version already installed. Mar 21 03:14:08 root maldet(14943): {sigup} performing signature update check... Mar 21 03:14:08 root maldet(14943): {sigup} local signature set is version 20220319164557 Mar 21 03:14:08 root maldet(14943): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 21 03:14:08 root maldet(14943): {sigup} latest signature set already installed Mar 21 03:14:09 root maldet(15063): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 21 03:14:09 root maldet(15063): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 21 03:14:09 root maldet(15063): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 21 03:14:09 root maldet(15063): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 21 03:14:09 root maldet(15063): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 21 03:14:12 root maldet(15063): {scan} file list completed in 3s, found 81 files... Mar 21 03:14:12 root maldet(15063): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 21 03:14:12 root maldet(15063): {scan} scan of (81 files) in progress... Mar 21 03:14:24 root maldet(15063): {scan} scan completed on : files 81, malware hits 0, cleaned hits 0, time 15s Mar 21 03:14:24 root maldet(15063): {scan} scan report saved, to view run: maldet --report 220321-0314.15063 Mar 22 03:56:54 root maldet(21022): {update} checking for available updates... Mar 22 03:56:55 root maldet(21022): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 22 03:56:55 root maldet(21022): {update} hashing install files and checking against server... Mar 22 03:56:55 root maldet(21022): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 22 03:56:55 root maldet(21022): {update} latest version already installed. Mar 22 03:56:55 root maldet(21172): {sigup} performing signature update check... Mar 22 03:56:55 root maldet(21172): {sigup} local signature set is version 20220319164557 Mar 22 03:56:56 root maldet(21172): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 22 03:56:56 root maldet(21172): {sigup} latest signature set already installed Mar 22 03:56:56 root maldet(21292): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 22 03:56:56 root maldet(21292): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 22 03:56:56 root maldet(21292): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 22 03:56:56 root maldet(21292): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 22 03:56:56 root maldet(21292): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 22 03:57:00 root maldet(21292): {scan} file list completed in 4s, found 66468 files... Mar 22 03:57:00 root maldet(21292): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 22 03:57:00 root maldet(21292): {scan} scan of (66468 files) in progress... Mar 22 03:58:54 root maldet(21292): {scan} scan completed on : files 66468, malware hits 0, cleaned hits 0, time 118s Mar 22 03:58:54 root maldet(21292): {scan} scan report saved, to view run: maldet --report 220322-0356.21292 Mar 23 03:10:12 root maldet(2242): {update} checking for available updates... Mar 23 03:10:13 root maldet(2242): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 23 03:10:13 root maldet(2242): {update} hashing install files and checking against server... Mar 23 03:10:14 root maldet(2242): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 23 03:10:14 root maldet(2242): {update} latest version already installed. Mar 23 03:10:14 root maldet(5676): {sigup} performing signature update check... Mar 23 03:10:14 root maldet(5676): {sigup} local signature set is version 20220319164557 Mar 23 03:10:14 root maldet(5676): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 23 03:10:15 root maldet(5676): {sigup} new signature set 20220322840957 available Mar 23 03:10:15 root maldet(5676): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 23 03:10:16 root maldet(5676): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 23 03:10:16 root maldet(5676): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 23 03:10:16 root maldet(5676): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 23 03:10:16 root maldet(5676): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 23 03:10:17 root maldet(5676): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 23 03:10:17 root maldet(5676): {sigup} verified md5sum of maldet-sigpack.tgz Mar 23 03:10:19 root maldet(5676): {sigup} unpacked and installed maldet-sigpack.tgz Mar 23 03:10:20 root maldet(5676): {sigup} verified md5sum of maldet-clean.tgz Mar 23 03:10:20 root maldet(5676): {sigup} unpacked and installed maldet-clean.tgz Mar 23 03:10:20 root maldet(5676): {sigup} signature set update completed Mar 23 03:10:20 root maldet(5676): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 23 03:10:20 root maldet(13063): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 23 03:10:22 root maldet(13063): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 23 03:10:22 root maldet(13063): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 23 03:10:22 root maldet(13063): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 23 03:10:22 root maldet(13063): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 23 03:18:56 root maldet(13063): {scan} file list completed in 514s, found 480 files... Mar 23 03:18:56 root maldet(13063): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 23 03:18:56 root maldet(13063): {scan} scan of (480 files) in progress... Mar 23 03:19:21 root maldet(13063): {scan} scan completed on : files 480, malware hits 0, cleaned hits 0, time 541s Mar 23 03:19:21 root maldet(13063): {scan} scan report saved, to view run: maldet --report 220323-0310.13063 Mar 24 03:37:06 root maldet(28112): {update} checking for available updates... Mar 24 03:37:07 root maldet(28112): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 24 03:37:07 root maldet(28112): {update} hashing install files and checking against server... Mar 24 03:37:08 root maldet(28112): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 24 03:37:08 root maldet(28112): {update} latest version already installed. Mar 24 03:37:08 root maldet(28255): {sigup} performing signature update check... Mar 24 03:37:08 root maldet(28255): {sigup} local signature set is version 20220322840957 Mar 24 03:37:08 root maldet(28255): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 24 03:37:08 root maldet(28255): {sigup} latest signature set already installed Mar 24 03:37:09 root maldet(28370): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 24 03:37:09 root maldet(28370): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 24 03:37:09 root maldet(28370): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 24 03:37:09 root maldet(28370): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 24 03:37:09 root maldet(28370): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 24 03:37:13 root maldet(28370): {scan} file list completed in 4s, found 149 files... Mar 24 03:37:13 root maldet(28370): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 24 03:37:13 root maldet(28370): {scan} scan of (149 files) in progress... Mar 24 03:37:29 root maldet(28370): {scan} scan completed on : files 149, malware hits 0, cleaned hits 0, time 20s Mar 24 03:37:29 root maldet(28370): {scan} scan report saved, to view run: maldet --report 220324-0337.28370 Mar 25 03:43:17 root maldet(9466): {update} checking for available updates... Mar 25 03:43:17 root maldet(9466): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 25 03:43:17 root maldet(9466): {update} hashing install files and checking against server... Mar 25 03:43:18 root maldet(9466): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 25 03:43:18 root maldet(9466): {update} latest version already installed. Mar 25 03:43:18 root maldet(9608): {sigup} performing signature update check... Mar 25 03:43:18 root maldet(9608): {sigup} local signature set is version 20220322840957 Mar 25 03:43:19 root maldet(9608): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 25 03:43:19 root maldet(9608): {sigup} latest signature set already installed Mar 25 03:43:19 root maldet(9719): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 25 03:43:19 root maldet(9719): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 25 03:43:19 root maldet(9719): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 25 03:43:19 root maldet(9719): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 25 03:43:19 root maldet(9719): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 25 03:43:24 root maldet(9719): {scan} file list completed in 5s, found 66510 files... Mar 25 03:43:24 root maldet(9719): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 25 03:43:24 root maldet(9719): {scan} scan of (66510 files) in progress... Mar 25 03:45:12 root maldet(9719): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/aftptarun/public_html/wp-content/plugins/envato-market/.3248c2d8.ico Mar 25 03:45:12 root maldet(9719): {quar} malware quarantined from '/home/aftptarun/public_html/wp-content/plugins/envato-market/.3248c2d8.ico' to '/usr/local/maldetect/quarantine/.3248c2d8.ico.443221647' Mar 25 03:45:13 root maldet(9719): {hit} malware hit {HEX}php.inject.miner2a2.484 found for /home/aftptarun/public_html/wp-includes/blocks/audio/.47d3bacd.ico Mar 25 03:45:13 root maldet(9719): {quar} malware quarantined from '/home/aftptarun/public_html/wp-includes/blocks/audio/.47d3bacd.ico' to '/usr/local/maldetect/quarantine/.47d3bacd.ico.1401524114' Mar 25 03:45:13 root maldet(9719): {scan} scan completed on : files 66510, malware hits 2, cleaned hits 0, time 114s Mar 25 03:45:13 root maldet(9719): {scan} scan report saved, to view run: maldet --report 220325-0343.9719 Mar 26 03:36:28 root maldet(11329): {update} checking for available updates... Mar 26 03:36:29 root maldet(11329): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 26 03:36:29 root maldet(11329): {update} hashing install files and checking against server... Mar 26 03:36:30 root maldet(11329): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 26 03:36:30 root maldet(11329): {update} latest version already installed. Mar 26 03:36:30 root maldet(11466): {sigup} performing signature update check... Mar 26 03:36:30 root maldet(11466): {sigup} local signature set is version 20220322840957 Mar 26 03:36:30 root maldet(11466): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 26 03:36:30 root maldet(11466): {sigup} new signature set 202203251519873 available Mar 26 03:36:30 root maldet(11466): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 26 03:36:31 root maldet(11466): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 26 03:36:32 root maldet(11466): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 26 03:36:32 root maldet(11466): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 26 03:36:32 root maldet(11466): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 26 03:36:33 root maldet(11466): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 26 03:36:33 root maldet(11466): {sigup} verified md5sum of maldet-sigpack.tgz Mar 26 03:36:33 root maldet(11466): {sigup} unpacked and installed maldet-sigpack.tgz Mar 26 03:36:33 root maldet(11466): {sigup} verified md5sum of maldet-clean.tgz Mar 26 03:36:33 root maldet(11466): {sigup} unpacked and installed maldet-clean.tgz Mar 26 03:36:33 root maldet(11466): {sigup} signature set update completed Mar 26 03:36:33 root maldet(11466): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 26 03:36:33 root maldet(11721): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 26 03:36:33 root maldet(11721): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 26 03:36:33 root maldet(11721): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 26 03:36:33 root maldet(11721): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 26 03:36:33 root maldet(11721): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/adityaprecitech/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascoadvi/public_html/" "/home/ascprofessionals/public_html/" "/home/banthan/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bluebellservicec/public_html/" "/home/bluecarpet/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanish/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/ileadglobalsolut/public_html/" "/home/indiagstsolution/public_html/" "/home/jkgalawchambers/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 26 03:36:37 root maldet(11721): {scan} file list completed in 4s, found 223 files... Mar 26 03:36:37 root maldet(11721): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 26 03:36:37 root maldet(11721): {scan} scan of (223 files) in progress... Mar 26 03:36:58 root maldet(11721): {scan} scan completed on : files 223, malware hits 0, cleaned hits 0, time 25s Mar 26 03:36:58 root maldet(11721): {scan} scan report saved, to view run: maldet --report 220326-0336.11721 Mar 27 03:28:03 root maldet(5615): {update} checking for available updates... Mar 27 03:28:04 root maldet(5615): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 27 03:28:04 root maldet(5615): {update} hashing install files and checking against server... Mar 27 03:28:05 root maldet(5615): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 27 03:28:05 root maldet(5615): {update} latest version already installed. Mar 27 03:28:05 root maldet(5775): {sigup} performing signature update check... Mar 27 03:28:05 root maldet(5775): {sigup} local signature set is version 202203251519873 Mar 27 03:28:05 root maldet(5775): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 27 03:28:05 root maldet(5775): {sigup} latest signature set already installed Mar 27 03:28:06 root maldet(5899): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 27 03:28:09 root maldet(5899): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 27 03:28:09 root maldet(5899): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 27 03:28:09 root maldet(5899): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 27 03:28:09 root maldet(5899): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 27 03:46:17 root maldet(5899): {scan} file list completed in 1088s, found 19501 files... Mar 27 03:46:17 root maldet(5899): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 27 03:46:17 root maldet(5899): {scan} scan of (19501 files) in progress... Mar 27 03:49:14 root maldet(5899): {hit} malware hit {HEX}php.nested.base64.637 found for /home/aftptarun/public_html/css/load.php Mar 27 03:49:14 root maldet(5899): {quar} malware quarantined from '/home/aftptarun/public_html/css/load.php' to '/usr/local/maldetect/quarantine/load.php.2351627043' Mar 27 03:49:14 root maldet(5899): {scan} scan completed on : files 19501, malware hits 1, cleaned hits 0, time 1268s Mar 27 03:49:14 root maldet(5899): {scan} scan report saved, to view run: maldet --report 220327-0328.5899 Mar 28 03:39:24 root maldet(17350): {update} checking for available updates... Mar 28 03:39:25 root maldet(17350): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 28 03:39:25 root maldet(17350): {update} hashing install files and checking against server... Mar 28 03:39:25 root maldet(17350): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 28 03:39:25 root maldet(17350): {update} latest version already installed. Mar 28 03:39:25 root maldet(17490): {sigup} performing signature update check... Mar 28 03:39:25 root maldet(17490): {sigup} local signature set is version 202203251519873 Mar 28 03:39:26 root maldet(17490): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 28 03:39:26 root maldet(17490): {sigup} latest signature set already installed Mar 28 03:39:26 root maldet(17606): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 28 03:39:27 root maldet(17606): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 28 03:39:27 root maldet(17606): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 28 03:39:27 root maldet(17606): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 28 03:39:27 root maldet(17606): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 28 03:39:31 root maldet(17606): {scan} file list completed in 4s, found 42887 files... Mar 28 03:39:31 root maldet(17606): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 28 03:39:31 root maldet(17606): {scan} scan of (42887 files) in progress... Mar 28 03:43:35 root maldet(17606): {scan} scan completed on : files 42887, malware hits 0, cleaned hits 0, time 249s Mar 28 03:43:35 root maldet(17606): {scan} scan report saved, to view run: maldet --report 220328-0339.17606 Mar 29 03:30:39 root maldet(31444): {update} checking for available updates... Mar 29 03:30:40 root maldet(31444): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 29 03:30:40 root maldet(31444): {update} hashing install files and checking against server... Mar 29 03:30:40 root maldet(31444): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 29 03:30:40 root maldet(31444): {update} latest version already installed. Mar 29 03:30:40 root maldet(31581): {sigup} performing signature update check... Mar 29 03:30:40 root maldet(31581): {sigup} local signature set is version 202203251519873 Mar 29 03:30:41 root maldet(31581): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 29 03:30:41 root maldet(31581): {sigup} new signature set 202203282226191 available Mar 29 03:30:41 root maldet(31581): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 29 03:30:41 root maldet(31581): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 29 03:30:42 root maldet(31581): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 29 03:30:42 root maldet(31581): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 29 03:30:42 root maldet(31581): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 29 03:30:42 root maldet(31581): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 29 03:30:42 root maldet(31581): {sigup} verified md5sum of maldet-sigpack.tgz Mar 29 03:30:42 root maldet(31581): {sigup} unpacked and installed maldet-sigpack.tgz Mar 29 03:30:42 root maldet(31581): {sigup} verified md5sum of maldet-clean.tgz Mar 29 03:30:42 root maldet(31581): {sigup} unpacked and installed maldet-clean.tgz Mar 29 03:30:43 root maldet(31581): {sigup} signature set update completed Mar 29 03:30:43 root maldet(31581): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 29 03:30:43 root maldet(31829): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 29 03:30:43 root maldet(31829): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 29 03:30:43 root maldet(31829): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 29 03:30:43 root maldet(31829): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 29 03:30:43 root maldet(31829): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 29 03:30:46 root maldet(31829): {scan} file list completed in 3s, found 323 files... Mar 29 03:30:46 root maldet(31829): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 29 03:30:46 root maldet(31829): {scan} scan of (323 files) in progress... Mar 29 03:31:01 root maldet(31829): {hit} malware hit {HEX}php.nested.base64.637 found for /home/ahmedinternation/public_html/css/load.php Mar 29 03:31:01 root maldet(31829): {quar} malware quarantined from '/home/ahmedinternation/public_html/css/load.php' to '/usr/local/maldetect/quarantine/load.php.153777523' Mar 29 03:31:01 root maldet(31829): {hit} malware hit {YARA}webshell_webshell_cnseay02_1 found for /home/onlinecfo/public_html/wp-booking.php Mar 29 03:31:01 root maldet(31829): {quar} malware quarantined from '/home/onlinecfo/public_html/wp-booking.php' to '/usr/local/maldetect/quarantine/wp-booking.php.2232323177' Mar 29 03:31:01 root maldet(31829): {scan} scan completed on : files 323, malware hits 2, cleaned hits 0, time 18s Mar 29 03:31:01 root maldet(31829): {scan} scan report saved, to view run: maldet --report 220329-0330.31829 Mar 30 03:24:44 root maldet(2049): {update} checking for available updates... Mar 30 03:24:44 root maldet(2049): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 30 03:24:44 root maldet(2049): {update} hashing install files and checking against server... Mar 30 03:24:45 root maldet(2049): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 30 03:24:45 root maldet(2049): {update} latest version already installed. Mar 30 03:24:45 root maldet(2192): {sigup} performing signature update check... Mar 30 03:24:45 root maldet(2192): {sigup} local signature set is version 202203282226191 Mar 30 03:24:45 root maldet(2192): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 30 03:24:46 root maldet(2192): {sigup} latest signature set already installed Mar 30 03:24:46 root maldet(2306): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 30 03:24:48 root maldet(2306): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 30 03:24:48 root maldet(2306): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 30 03:24:48 root maldet(2306): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 30 03:24:48 root maldet(2306): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 30 03:39:10 root maldet(2306): {scan} file list completed in 862s, found 277 files... Mar 30 03:39:10 root maldet(2306): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 30 03:39:10 root maldet(2306): {scan} scan of (277 files) in progress... Mar 30 03:39:56 root maldet(2306): {scan} scan completed on : files 277, malware hits 0, cleaned hits 0, time 909s Mar 30 03:39:56 root maldet(2306): {scan} scan report saved, to view run: maldet --report 220330-0324.2306 Mar 31 03:31:54 root maldet(26875): {update} checking for available updates... Mar 31 03:31:54 root maldet(26875): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 31 03:31:54 root maldet(26875): {update} hashing install files and checking against server... Mar 31 03:31:55 root maldet(26875): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 31 03:31:55 root maldet(26875): {update} latest version already installed. Mar 31 03:31:55 root maldet(27010): {sigup} performing signature update check... Mar 31 03:31:55 root maldet(27010): {sigup} local signature set is version 202203282226191 Mar 31 03:31:55 root maldet(27010): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 31 03:31:55 root maldet(27010): {sigup} latest signature set already installed Mar 31 03:31:56 root maldet(27125): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 31 03:31:56 root maldet(27125): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Mar 31 03:31:56 root maldet(27125): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 31 03:31:56 root maldet(27125): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 31 03:31:56 root maldet(27125): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 31 03:32:00 root maldet(27125): {scan} file list completed in 4s, found 100 files... Mar 31 03:32:00 root maldet(27125): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 31 03:32:00 root maldet(27125): {scan} scan of (100 files) in progress... Mar 31 03:32:11 root maldet(27125): {scan} scan completed on : files 100, malware hits 0, cleaned hits 0, time 15s Mar 31 03:32:11 root maldet(27125): {scan} scan report saved, to view run: maldet --report 220331-0331.27125 Apr 01 03:53:27 root maldet(30921): {update} checking for available updates... Apr 01 03:53:27 root maldet(30921): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 01 03:53:27 root maldet(30921): {update} hashing install files and checking against server... Apr 01 03:53:27 root maldet(30921): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 01 03:53:27 root maldet(30921): {update} latest version already installed. Apr 01 03:53:28 root maldet(31157): {sigup} performing signature update check... Apr 01 03:53:28 root maldet(31157): {sigup} local signature set is version 202203282226191 Apr 01 03:53:28 root maldet(31157): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 01 03:53:28 root maldet(31157): {sigup} new signature set 202203312917335 available Apr 01 03:53:28 root maldet(31157): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 01 03:53:29 root maldet(31157): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 01 03:53:29 root maldet(31157): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 01 03:53:29 root maldet(31157): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 01 03:53:30 root maldet(31157): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 01 03:53:30 root maldet(31157): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 01 03:53:30 root maldet(31157): {sigup} verified md5sum of maldet-sigpack.tgz Apr 01 03:53:30 root maldet(31157): {sigup} unpacked and installed maldet-sigpack.tgz Apr 01 03:53:30 root maldet(31157): {sigup} verified md5sum of maldet-clean.tgz Apr 01 03:53:30 root maldet(31157): {sigup} unpacked and installed maldet-clean.tgz Apr 01 03:53:30 root maldet(31157): {sigup} signature set update completed Apr 01 03:53:30 root maldet(31157): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 01 03:53:30 root maldet(31402): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 01 03:53:31 root maldet(31402): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 01 03:53:31 root maldet(31402): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 01 03:53:31 root maldet(31402): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 01 03:53:31 root maldet(31402): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 01 04:11:50 root maldet(31402): {scan} file list completed in 1099s, found 161 files... Apr 01 04:11:50 root maldet(31402): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 01 04:11:50 root maldet(31402): {scan} scan of (161 files) in progress... Apr 01 04:12:22 root maldet(31402): {scan} scan completed on : files 161, malware hits 0, cleaned hits 0, time 1132s Apr 01 04:12:22 root maldet(31402): {scan} scan report saved, to view run: maldet --report 220401-0353.31402 Apr 02 03:28:53 root maldet(27984): {update} checking for available updates... Apr 02 03:28:54 root maldet(27984): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 02 03:28:54 root maldet(27984): {update} hashing install files and checking against server... Apr 02 03:28:54 root maldet(27984): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 02 03:28:54 root maldet(27984): {update} latest version already installed. Apr 02 03:28:54 root maldet(28120): {sigup} performing signature update check... Apr 02 03:28:54 root maldet(28120): {sigup} local signature set is version 202203312917335 Apr 02 03:28:55 root maldet(28120): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 02 03:28:55 root maldet(28120): {sigup} new signature set 202204013549495 available Apr 02 03:28:55 root maldet(28120): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 02 03:28:55 root maldet(28120): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 02 03:28:56 root maldet(28120): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 02 03:28:56 root maldet(28120): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 02 03:28:56 root maldet(28120): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 02 03:28:56 root maldet(28120): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 02 03:28:56 root maldet(28120): {sigup} verified md5sum of maldet-sigpack.tgz Apr 02 03:28:56 root maldet(28120): {sigup} unpacked and installed maldet-sigpack.tgz Apr 02 03:28:57 root maldet(28120): {sigup} verified md5sum of maldet-clean.tgz Apr 02 03:28:57 root maldet(28120): {sigup} unpacked and installed maldet-clean.tgz Apr 02 03:28:57 root maldet(28120): {sigup} signature set update completed Apr 02 03:28:57 root maldet(28120): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 02 03:28:57 root maldet(28360): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 02 03:28:57 root maldet(28360): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 02 03:28:57 root maldet(28360): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 02 03:28:57 root maldet(28360): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 02 03:28:57 root maldet(28360): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 02 03:29:01 root maldet(28360): {scan} file list completed in 4s, found 96 files... Apr 02 03:29:01 root maldet(28360): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 02 03:29:01 root maldet(28360): {scan} scan of (96 files) in progress... Apr 02 03:29:15 root maldet(28360): {scan} scan completed on : files 96, malware hits 0, cleaned hits 0, time 18s Apr 02 03:29:15 root maldet(28360): {scan} scan report saved, to view run: maldet --report 220402-0328.28360 Apr 03 03:22:12 root maldet(10443): {update} checking for available updates... Apr 03 03:22:12 root maldet(10443): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 03 03:22:12 root maldet(10443): {update} hashing install files and checking against server... Apr 03 03:22:12 root maldet(10443): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 03 03:22:12 root maldet(10443): {update} latest version already installed. Apr 03 03:22:13 root maldet(10614): {sigup} performing signature update check... Apr 03 03:22:13 root maldet(10614): {sigup} local signature set is version 202204013549495 Apr 03 03:22:13 root maldet(10614): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 03 03:22:13 root maldet(10614): {sigup} latest signature set already installed Apr 03 03:22:13 root maldet(10757): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 03 03:22:15 root maldet(10757): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 03 03:22:15 root maldet(10757): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 03 03:22:15 root maldet(10757): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 03 03:22:15 root maldet(10757): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 03 03:32:01 root maldet(10757): {scan} file list completed in 586s, found 199 files... Apr 03 03:32:01 root maldet(10757): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 03 03:32:01 root maldet(10757): {scan} scan of (199 files) in progress... Apr 03 03:32:22 root maldet(10757): {scan} scan completed on : files 199, malware hits 0, cleaned hits 0, time 609s Apr 03 03:32:22 root maldet(10757): {scan} scan report saved, to view run: maldet --report 220403-0322.10757 Apr 04 03:23:53 root maldet(16763): {update} checking for available updates... Apr 04 03:23:54 root maldet(16763): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 04 03:23:54 root maldet(16763): {update} hashing install files and checking against server... Apr 04 03:23:54 root maldet(16763): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 04 03:23:54 root maldet(16763): {update} latest version already installed. Apr 04 03:23:54 root maldet(16905): {sigup} performing signature update check... Apr 04 03:23:54 root maldet(16905): {sigup} local signature set is version 202204013549495 Apr 04 03:23:55 root maldet(16905): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 04 03:23:55 root maldet(16905): {sigup} latest signature set already installed Apr 04 03:23:55 root maldet(17020): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 04 03:23:56 root maldet(17020): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 04 03:23:56 root maldet(17020): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 04 03:23:56 root maldet(17020): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 04 03:23:56 root maldet(17020): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 04 03:23:59 root maldet(17020): {scan} file list completed in 3s, found 82 files... Apr 04 03:23:59 root maldet(17020): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 04 03:23:59 root maldet(17020): {scan} scan of (82 files) in progress... Apr 04 03:24:15 root maldet(17020): {scan} scan completed on : files 82, malware hits 0, cleaned hits 0, time 19s Apr 04 03:24:15 root maldet(17020): {scan} scan report saved, to view run: maldet --report 220404-0323.17020 Apr 05 03:10:31 root maldet(31664): {update} checking for available updates... Apr 05 03:10:31 root maldet(31664): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 05 03:10:31 root maldet(31664): {update} hashing install files and checking against server... Apr 05 03:10:31 root maldet(31664): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 05 03:10:31 root maldet(31664): {update} latest version already installed. Apr 05 03:10:31 root maldet(31821): {sigup} performing signature update check... Apr 05 03:10:31 root maldet(31821): {sigup} local signature set is version 202204013549495 Apr 05 03:10:32 root maldet(31821): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 05 03:10:32 root maldet(31821): {sigup} new signature set 2022040430434 available Apr 05 03:10:32 root maldet(31821): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 05 03:10:32 root maldet(31821): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 05 03:10:33 root maldet(31821): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 05 03:10:33 root maldet(31821): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 05 03:10:33 root maldet(31821): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 05 03:10:33 root maldet(31821): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 05 03:10:33 root maldet(31821): {sigup} verified md5sum of maldet-sigpack.tgz Apr 05 03:10:33 root maldet(31821): {sigup} unpacked and installed maldet-sigpack.tgz Apr 05 03:10:33 root maldet(31821): {sigup} verified md5sum of maldet-clean.tgz Apr 05 03:10:33 root maldet(31821): {sigup} unpacked and installed maldet-clean.tgz Apr 05 03:10:33 root maldet(31821): {sigup} signature set update completed Apr 05 03:10:33 root maldet(31821): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 05 03:10:33 root maldet(32120): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 05 03:10:34 root maldet(32120): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 05 03:10:34 root maldet(32120): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 05 03:10:34 root maldet(32120): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 05 03:10:34 root maldet(32120): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/organicw/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri1/public_html/" "/home/rajksri/public_html/" "/home/rakeshan/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sanjeevvarshneyc/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/skpco/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/wiretwis/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/xoput/public_html/" "/home/yalatravelz/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 05 03:10:38 root maldet(32120): {scan} file list completed in 4s, found 103 files... Apr 05 03:10:38 root maldet(32120): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 05 03:10:38 root maldet(32120): {scan} scan of (103 files) in progress... Apr 05 03:10:55 root maldet(32120): {scan} scan completed on : files 103, malware hits 0, cleaned hits 0, time 22s Apr 05 03:10:55 root maldet(32120): {scan} scan report saved, to view run: maldet --report 220405-0310.32120 Apr 06 03:38:11 root maldet(20007): {update} checking for available updates... Apr 06 03:38:12 root maldet(20007): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 06 03:38:12 root maldet(20007): {update} hashing install files and checking against server... Apr 06 03:38:12 root maldet(20007): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 06 03:38:12 root maldet(20007): {update} latest version already installed. Apr 06 03:38:12 root maldet(20144): {sigup} performing signature update check... Apr 06 03:38:12 root maldet(20144): {sigup} local signature set is version 2022040430434 Apr 06 03:38:13 root maldet(20144): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 06 03:38:13 root maldet(20144): {sigup} latest signature set already installed Apr 06 03:38:13 root maldet(20258): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 06 03:38:14 root maldet(20258): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 06 03:38:14 root maldet(20258): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 06 03:38:14 root maldet(20258): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 06 03:38:14 root maldet(20258): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/techwork/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 06 03:56:17 root maldet(20258): {scan} file list completed in 1083s, found 21464 files... Apr 06 03:56:17 root maldet(20258): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 06 03:56:17 root maldet(20258): {scan} scan of (21464 files) in progress... Apr 06 03:59:45 root maldet(20258): {scan} scan completed on : files 21464, malware hits 0, cleaned hits 0, time 1292s Apr 06 03:59:45 root maldet(20258): {scan} scan report saved, to view run: maldet --report 220406-0338.20258 Apr 07 03:29:07 root maldet(13868): {update} checking for available updates... Apr 07 03:29:08 root maldet(13868): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 07 03:29:08 root maldet(13868): {update} hashing install files and checking against server... Apr 07 03:29:08 root maldet(13868): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 07 03:29:08 root maldet(13868): {update} latest version already installed. Apr 07 03:29:08 root maldet(14007): {sigup} performing signature update check... Apr 07 03:29:08 root maldet(14007): {sigup} local signature set is version 2022040430434 Apr 07 03:29:09 root maldet(14007): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 07 03:29:09 root maldet(14007): {sigup} latest signature set already installed Apr 07 03:29:09 root maldet(14120): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 07 03:29:10 root maldet(14120): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 07 03:29:10 root maldet(14120): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 07 03:29:10 root maldet(14120): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 07 03:29:10 root maldet(14120): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 07 03:29:13 root maldet(14120): {scan} file list completed in 3s, found 20624 files... Apr 07 03:29:13 root maldet(14120): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 07 03:29:13 root maldet(14120): {scan} scan of (20624 files) in progress... Apr 07 03:30:08 root maldet(14120): {scan} scan completed on : files 20624, malware hits 0, cleaned hits 0, time 59s Apr 07 03:30:08 root maldet(14120): {scan} scan report saved, to view run: maldet --report 220407-0329.14120 Apr 08 03:14:43 root maldet(17003): {update} checking for available updates... Apr 08 03:14:44 root maldet(17003): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 08 03:14:44 root maldet(17003): {update} hashing install files and checking against server... Apr 08 03:14:44 root maldet(17003): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 08 03:14:44 root maldet(17003): {update} latest version already installed. Apr 08 03:14:44 root maldet(17145): {sigup} performing signature update check... Apr 08 03:14:44 root maldet(17145): {sigup} local signature set is version 2022040430434 Apr 08 03:14:45 root maldet(17145): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 08 03:14:45 root maldet(17145): {sigup} new signature set 20220407708024 available Apr 08 03:14:45 root maldet(17145): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 08 03:14:46 root maldet(17145): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 08 03:14:46 root maldet(17145): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 08 03:14:46 root maldet(17145): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 08 03:14:46 root maldet(17145): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 08 03:14:47 root maldet(17145): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 08 03:14:47 root maldet(17145): {sigup} verified md5sum of maldet-sigpack.tgz Apr 08 03:14:47 root maldet(17145): {sigup} unpacked and installed maldet-sigpack.tgz Apr 08 03:14:47 root maldet(17145): {sigup} verified md5sum of maldet-clean.tgz Apr 08 03:14:47 root maldet(17145): {sigup} unpacked and installed maldet-clean.tgz Apr 08 03:14:47 root maldet(17145): {sigup} signature set update completed Apr 08 03:14:47 root maldet(17145): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 08 03:14:47 root maldet(17393): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 08 03:14:47 root maldet(17393): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 08 03:14:47 root maldet(17393): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 08 03:14:47 root maldet(17393): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 08 03:14:47 root maldet(17393): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 08 03:14:51 root maldet(17393): {scan} file list completed in 4s, found 21003 files... Apr 08 03:14:51 root maldet(17393): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 08 03:14:51 root maldet(17393): {scan} scan of (21003 files) in progress... Apr 08 03:16:17 root maldet(17393): {scan} scan completed on : files 21003, malware hits 0, cleaned hits 0, time 90s Apr 08 03:16:17 root maldet(17393): {scan} scan report saved, to view run: maldet --report 220408-0314.17393 Apr 09 03:11:05 root maldet(23585): {update} checking for available updates... Apr 09 03:11:05 root maldet(23585): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 09 03:11:05 root maldet(23585): {update} hashing install files and checking against server... Apr 09 03:11:06 root maldet(23585): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 09 03:11:06 root maldet(23585): {update} latest version already installed. Apr 09 03:11:06 root maldet(23727): {sigup} performing signature update check... Apr 09 03:11:06 root maldet(23727): {sigup} local signature set is version 20220407708024 Apr 09 03:11:06 root maldet(23727): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 09 03:11:06 root maldet(23727): {sigup} latest signature set already installed Apr 09 03:11:06 root maldet(23841): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 09 03:11:07 root maldet(23841): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 09 03:11:07 root maldet(23841): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 09 03:11:07 root maldet(23841): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 09 03:11:07 root maldet(23841): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 09 03:11:10 root maldet(23841): {scan} file list completed in 3s, found 20621 files... Apr 09 03:11:10 root maldet(23841): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 09 03:11:10 root maldet(23841): {scan} scan of (20621 files) in progress... Apr 09 03:11:57 root maldet(23841): {scan} scan completed on : files 20621, malware hits 0, cleaned hits 0, time 51s Apr 09 03:11:57 root maldet(23841): {scan} scan report saved, to view run: maldet --report 220409-0311.23841 Apr 10 03:12:29 root maldet(29344): {update} checking for available updates... Apr 10 03:12:30 root maldet(29344): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 10 03:12:30 root maldet(29344): {update} hashing install files and checking against server... Apr 10 03:12:30 root maldet(29344): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 10 03:12:30 root maldet(29344): {update} latest version already installed. Apr 10 03:12:30 root maldet(29490): {sigup} performing signature update check... Apr 10 03:12:30 root maldet(29490): {sigup} local signature set is version 20220407708024 Apr 10 03:12:30 root maldet(29490): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 10 03:12:31 root maldet(29490): {sigup} latest signature set already installed Apr 10 03:12:31 root maldet(29631): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 10 03:12:32 root maldet(29631): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 10 03:12:32 root maldet(29631): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 10 03:12:32 root maldet(29631): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 10 03:12:32 root maldet(29631): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 10 03:33:55 root maldet(29631): {scan} file list completed in 1283s, found 41231 files... Apr 10 03:33:55 root maldet(29631): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 10 03:33:55 root maldet(29631): {scan} scan of (41231 files) in progress... Apr 10 03:42:52 root maldet(29631): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Apr 10 03:42:53 root maldet(29631): {scan} scan completed on : files 41231, malware hits 0, cleaned hits 0, time 1821s Apr 10 03:42:53 root maldet(29631): {scan} scan report saved, to view run: maldet --report 220410-0312.29631 Apr 11 03:49:04 root maldet(25999): {update} checking for available updates... Apr 11 03:49:04 root maldet(25999): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 11 03:49:04 root maldet(25999): {update} hashing install files and checking against server... Apr 11 03:49:04 root maldet(25999): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 11 03:49:04 root maldet(25999): {update} latest version already installed. Apr 11 03:49:05 root maldet(26140): {sigup} performing signature update check... Apr 11 03:49:05 root maldet(26140): {sigup} local signature set is version 20220407708024 Apr 11 03:49:05 root maldet(26140): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 11 03:49:05 root maldet(26140): {sigup} new signature set 202204101502795 available Apr 11 03:49:05 root maldet(26140): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 11 03:49:06 root maldet(26140): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 11 03:49:06 root maldet(26140): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 11 03:49:06 root maldet(26140): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 11 03:49:06 root maldet(26140): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 11 03:49:07 root maldet(26140): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 11 03:49:07 root maldet(26140): {sigup} verified md5sum of maldet-sigpack.tgz Apr 11 03:49:07 root maldet(26140): {sigup} unpacked and installed maldet-sigpack.tgz Apr 11 03:49:07 root maldet(26140): {sigup} verified md5sum of maldet-clean.tgz Apr 11 03:49:07 root maldet(26140): {sigup} unpacked and installed maldet-clean.tgz Apr 11 03:49:07 root maldet(26140): {sigup} signature set update completed Apr 11 03:49:07 root maldet(26140): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 11 03:49:07 root maldet(26438): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 11 03:49:08 root maldet(26438): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 11 03:49:08 root maldet(26438): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 11 03:49:08 root maldet(26438): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 11 03:49:08 root maldet(26438): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 11 03:49:11 root maldet(26438): {scan} file list completed in 3s, found 81 files... Apr 11 03:49:11 root maldet(26438): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 11 03:49:11 root maldet(26438): {scan} scan of (81 files) in progress... Apr 11 03:49:21 root maldet(26438): {scan} scan completed on : files 81, malware hits 0, cleaned hits 0, time 14s Apr 11 03:49:21 root maldet(26438): {scan} scan report saved, to view run: maldet --report 220411-0349.26438 Apr 12 03:30:21 root maldet(14767): {update} checking for available updates... Apr 12 03:30:22 root maldet(14767): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 12 03:30:22 root maldet(14767): {update} hashing install files and checking against server... Apr 12 03:30:22 root maldet(14767): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 12 03:30:22 root maldet(14767): {update} latest version already installed. Apr 12 03:30:22 root maldet(14903): {sigup} performing signature update check... Apr 12 03:30:22 root maldet(14903): {sigup} local signature set is version 202204101502795 Apr 12 03:30:23 root maldet(14903): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 12 03:30:23 root maldet(14903): {sigup} latest signature set already installed Apr 12 03:30:23 root maldet(15015): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 12 03:30:23 root maldet(15015): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 12 03:30:23 root maldet(15015): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 12 03:30:23 root maldet(15015): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 12 03:30:23 root maldet(15015): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 12 03:30:27 root maldet(15015): {scan} file list completed in 4s, found 41155 files... Apr 12 03:30:27 root maldet(15015): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 12 03:30:27 root maldet(15015): {scan} scan of (41155 files) in progress... Apr 12 03:31:19 root maldet(15015): {scan} scan completed on : files 41155, malware hits 0, cleaned hits 0, time 56s Apr 12 03:31:19 root maldet(15015): {scan} scan report saved, to view run: maldet --report 220412-0330.15015 Apr 13 04:03:37 root maldet(20964): {update} checking for available updates... Apr 13 04:03:37 root maldet(20964): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 13 04:03:37 root maldet(20964): {update} hashing install files and checking against server... Apr 13 04:03:38 root maldet(20964): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 13 04:03:38 root maldet(20964): {update} latest version already installed. Apr 13 04:03:38 root maldet(21134): {sigup} performing signature update check... Apr 13 04:03:38 root maldet(21134): {sigup} local signature set is version 202204101502795 Apr 13 04:03:38 root maldet(21134): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 13 04:03:38 root maldet(21134): {sigup} latest signature set already installed Apr 13 04:03:38 root maldet(21269): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 13 04:03:39 root maldet(21269): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 13 04:03:39 root maldet(21269): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 13 04:03:39 root maldet(21269): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 13 04:03:39 root maldet(21269): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 13 04:19:52 root maldet(21269): {scan} file list completed in 973s, found 41159 files... Apr 13 04:19:52 root maldet(21269): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 13 04:19:52 root maldet(21269): {scan} scan of (41159 files) in progress... Apr 13 04:27:55 root maldet(21269): {scan} scan completed on : files 41159, malware hits 0, cleaned hits 0, time 1457s Apr 13 04:27:55 root maldet(21269): {scan} scan report saved, to view run: maldet --report 220413-0403.21269 Apr 14 03:17:46 root maldet(1939): {update} checking for available updates... Apr 14 03:17:47 root maldet(1939): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 14 03:17:47 root maldet(1939): {update} hashing install files and checking against server... Apr 14 03:17:47 root maldet(1939): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 14 03:17:47 root maldet(1939): {update} latest version already installed. Apr 14 03:17:47 root maldet(2083): {sigup} performing signature update check... Apr 14 03:17:47 root maldet(2083): {sigup} local signature set is version 202204101502795 Apr 14 03:17:48 root maldet(2083): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 14 03:17:48 root maldet(2083): {sigup} new signature set 202204132190160 available Apr 14 03:17:48 root maldet(2083): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 14 03:17:48 root maldet(2083): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 14 03:17:49 root maldet(2083): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 14 03:17:49 root maldet(2083): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 14 03:17:49 root maldet(2083): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 14 03:17:49 root maldet(2083): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 14 03:17:49 root maldet(2083): {sigup} verified md5sum of maldet-sigpack.tgz Apr 14 03:17:49 root maldet(2083): {sigup} unpacked and installed maldet-sigpack.tgz Apr 14 03:17:49 root maldet(2083): {sigup} verified md5sum of maldet-clean.tgz Apr 14 03:17:49 root maldet(2083): {sigup} unpacked and installed maldet-clean.tgz Apr 14 03:17:49 root maldet(2083): {sigup} signature set update completed Apr 14 03:17:49 root maldet(2083): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 14 03:17:50 root maldet(2346): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 14 03:17:50 root maldet(2346): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 14 03:17:50 root maldet(2346): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 14 03:17:50 root maldet(2346): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 14 03:17:50 root maldet(2346): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 14 03:17:54 root maldet(2346): {scan} file list completed in 4s, found 112 files... Apr 14 03:17:54 root maldet(2346): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 14 03:17:54 root maldet(2346): {scan} scan of (112 files) in progress... Apr 14 03:18:13 root maldet(2346): {scan} scan completed on : files 112, malware hits 0, cleaned hits 0, time 23s Apr 14 03:18:13 root maldet(2346): {scan} scan report saved, to view run: maldet --report 220414-0317.2346 Apr 15 03:30:02 root maldet(5488): {update} checking for available updates... Apr 15 03:30:02 root maldet(5488): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 15 03:30:02 root maldet(5488): {update} hashing install files and checking against server... Apr 15 03:30:03 root maldet(5488): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 15 03:30:03 root maldet(5488): {update} latest version already installed. Apr 15 03:30:03 root maldet(5786): {sigup} performing signature update check... Apr 15 03:30:03 root maldet(5786): {sigup} local signature set is version 202204132190160 Apr 15 03:30:03 root maldet(5786): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 15 03:30:03 root maldet(5786): {sigup} latest signature set already installed Apr 15 03:30:03 root maldet(5919): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 15 03:30:03 root maldet(5919): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 15 03:30:03 root maldet(5919): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 15 03:30:03 root maldet(5919): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 15 03:30:03 root maldet(5919): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 15 03:30:07 root maldet(5919): {scan} file list completed in 4s, found 93 files... Apr 15 03:30:07 root maldet(5919): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 15 03:30:07 root maldet(5919): {scan} scan of (93 files) in progress... Apr 15 03:30:17 root maldet(5919): {scan} scan completed on : files 93, malware hits 0, cleaned hits 0, time 14s Apr 15 03:30:17 root maldet(5919): {scan} scan report saved, to view run: maldet --report 220415-0330.5919 Apr 16 03:21:04 root maldet(3169): {update} checking for available updates... Apr 16 03:21:05 root maldet(3169): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 16 03:21:05 root maldet(3169): {update} hashing install files and checking against server... Apr 16 03:21:05 root maldet(3169): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 16 03:21:05 root maldet(3169): {update} latest version already installed. Apr 16 03:21:05 root maldet(3312): {sigup} performing signature update check... Apr 16 03:21:05 root maldet(3312): {sigup} local signature set is version 202204132190160 Apr 16 03:21:06 root maldet(3312): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 16 03:21:06 root maldet(3312): {sigup} latest signature set already installed Apr 16 03:21:06 root maldet(3461): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 16 03:21:06 root maldet(3461): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 16 03:21:06 root maldet(3461): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 16 03:21:06 root maldet(3461): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 16 03:21:06 root maldet(3461): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 16 03:21:10 root maldet(3461): {scan} file list completed in 4s, found 76 files... Apr 16 03:21:10 root maldet(3461): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 16 03:21:10 root maldet(3461): {scan} scan of (76 files) in progress... Apr 16 03:21:20 root maldet(3461): {scan} scan completed on : files 76, malware hits 0, cleaned hits 0, time 14s Apr 16 03:21:20 root maldet(3461): {scan} scan report saved, to view run: maldet --report 220416-0321.3461 Apr 17 03:43:36 root maldet(28753): {update} checking for available updates... Apr 17 03:43:39 root maldet(28753): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 17 03:43:39 root maldet(28753): {update} hashing install files and checking against server... Apr 17 03:43:39 root maldet(28753): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 17 03:43:39 root maldet(28753): {update} latest version already installed. Apr 17 03:43:40 root maldet(29039): {sigup} performing signature update check... Apr 17 03:43:40 root maldet(29039): {sigup} local signature set is version 202204132190160 Apr 17 03:43:40 root maldet(29039): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 17 03:43:40 root maldet(29039): {sigup} new signature set 202204162877702 available Apr 17 03:43:40 root maldet(29039): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 17 03:43:41 root maldet(29039): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 17 03:43:41 root maldet(29039): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 17 03:43:41 root maldet(29039): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 17 03:43:42 root maldet(29039): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 17 03:43:42 root maldet(29039): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 17 03:43:42 root maldet(29039): {sigup} verified md5sum of maldet-sigpack.tgz Apr 17 03:43:45 root maldet(29039): {sigup} unpacked and installed maldet-sigpack.tgz Apr 17 03:43:46 root maldet(29039): {sigup} verified md5sum of maldet-clean.tgz Apr 17 03:43:46 root maldet(29039): {sigup} unpacked and installed maldet-clean.tgz Apr 17 03:43:46 root maldet(29039): {sigup} signature set update completed Apr 17 03:43:46 root maldet(29039): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 17 03:43:46 root maldet(29686): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 17 03:43:49 root maldet(29686): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 17 03:43:49 root maldet(29686): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 17 03:43:49 root maldet(29686): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 17 03:43:49 root maldet(29686): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 17 04:36:20 root maldet(29686): {scan} file list completed in 3151s, found 533 files... Apr 17 04:36:20 root maldet(29686): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 17 04:36:20 root maldet(29686): {scan} scan of (533 files) in progress... Apr 17 04:37:29 root maldet(29686): {scan} scan completed on : files 533, malware hits 0, cleaned hits 0, time 3223s Apr 17 04:37:29 root maldet(29686): {scan} scan report saved, to view run: maldet --report 220417-0343.29686 Apr 18 03:24:13 root maldet(14753): {update} checking for available updates... Apr 18 03:24:14 root maldet(14753): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 18 03:24:14 root maldet(14753): {update} hashing install files and checking against server... Apr 18 03:24:14 root maldet(14753): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 18 03:24:14 root maldet(14753): {update} latest version already installed. Apr 18 03:24:14 root maldet(14914): {sigup} performing signature update check... Apr 18 03:24:14 root maldet(14914): {sigup} local signature set is version 202204162877702 Apr 18 03:24:15 root maldet(14914): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 18 03:24:15 root maldet(14914): {sigup} latest signature set already installed Apr 18 03:24:15 root maldet(15037): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 18 03:24:16 root maldet(15037): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 18 03:24:16 root maldet(15037): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 18 03:24:16 root maldet(15037): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 18 03:24:16 root maldet(15037): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 18 03:24:20 root maldet(15037): {scan} file list completed in 4s, found 87 files... Apr 18 03:24:20 root maldet(15037): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 18 03:24:20 root maldet(15037): {scan} scan of (87 files) in progress... Apr 18 03:24:33 root maldet(15037): {scan} scan completed on : files 87, malware hits 0, cleaned hits 0, time 17s Apr 18 03:24:33 root maldet(15037): {scan} scan report saved, to view run: maldet --report 220418-0324.15037 Apr 19 03:09:31 root maldet(14467): {update} checking for available updates... Apr 19 03:09:32 root maldet(14467): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 19 03:09:32 root maldet(14467): {update} hashing install files and checking against server... Apr 19 03:09:32 root maldet(14467): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 19 03:09:32 root maldet(14467): {update} latest version already installed. Apr 19 03:09:32 root maldet(16411): {sigup} performing signature update check... Apr 19 03:09:32 root maldet(16411): {sigup} local signature set is version 202204162877702 Apr 19 03:09:33 root maldet(16411): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 19 03:09:33 root maldet(16411): {sigup} latest signature set already installed Apr 19 03:09:33 root maldet(17304): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 19 03:09:33 root maldet(17304): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 19 03:09:33 root maldet(17304): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 19 03:09:33 root maldet(17304): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 19 03:09:33 root maldet(17304): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 19 03:09:36 root maldet(17304): {scan} file list completed in 3s, found 653 files... Apr 19 03:09:36 root maldet(17304): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 19 03:09:36 root maldet(17304): {scan} scan of (653 files) in progress... Apr 19 03:09:46 root maldet(17304): {hit} malware hit {HEX}php.nested.base64.637 found for /home/mender/public_html/css/load.php Apr 19 03:09:46 root maldet(17304): {quar} malware quarantined from '/home/mender/public_html/css/load.php' to '/usr/local/maldetect/quarantine/load.php.295478516' Apr 19 03:09:47 root maldet(17304): {hit} malware hit {HEX}php.nested.base64.637 found for /home/mender/public_html/backup3dec2020/plugins/master@mender/fckeditor/editor/plugins/wp-login.php Apr 19 03:09:47 root maldet(17304): {quar} malware quarantined from '/home/mender/public_html/backup3dec2020/plugins/master@mender/fckeditor/editor/plugins/wp-login.php' to '/usr/local/maldetect/quarantine/wp-login.php.3091319012' Apr 19 03:09:47 root maldet(17304): {scan} scan completed on : files 653, malware hits 2, cleaned hits 0, time 14s Apr 19 03:09:47 root maldet(17304): {scan} scan report saved, to view run: maldet --report 220419-0309.17304 Apr 20 03:53:44 root maldet(27151): {update} checking for available updates... Apr 20 03:53:44 root maldet(27151): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 20 03:53:44 root maldet(27151): {update} hashing install files and checking against server... Apr 20 03:53:45 root maldet(27151): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 20 03:53:45 root maldet(27151): {update} latest version already installed. Apr 20 03:53:45 root maldet(27308): {sigup} performing signature update check... Apr 20 03:53:45 root maldet(27308): {sigup} local signature set is version 202204162877702 Apr 20 03:53:45 root maldet(27308): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 20 03:53:46 root maldet(27308): {sigup} new signature set 202204193564023 available Apr 20 03:53:46 root maldet(27308): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 20 03:53:46 root maldet(27308): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 20 03:53:47 root maldet(27308): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 20 03:53:47 root maldet(27308): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 20 03:53:47 root maldet(27308): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 20 03:53:47 root maldet(27308): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 20 03:53:47 root maldet(27308): {sigup} verified md5sum of maldet-sigpack.tgz Apr 20 03:53:49 root maldet(27308): {sigup} unpacked and installed maldet-sigpack.tgz Apr 20 03:53:49 root maldet(27308): {sigup} verified md5sum of maldet-clean.tgz Apr 20 03:53:49 root maldet(27308): {sigup} unpacked and installed maldet-clean.tgz Apr 20 03:53:49 root maldet(27308): {sigup} signature set update completed Apr 20 03:53:50 root maldet(27308): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 20 03:53:50 root maldet(27621): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 20 03:53:54 root maldet(27621): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 20 03:53:54 root maldet(27621): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 20 03:53:54 root maldet(27621): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 20 03:53:54 root maldet(27621): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 20 04:20:10 root maldet(27621): {scan} file list completed in 1576s, found 17160 files... Apr 20 04:20:10 root maldet(27621): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 20 04:20:10 root maldet(27621): {scan} scan of (17160 files) in progress... Apr 20 04:33:23 root maldet(27621): {hit} malware hit {HEX}php.nested.base64.637 found for /home/mender/public_html/css/load.php Apr 20 04:33:23 root maldet(27621): {quar} malware quarantined from '/home/mender/public_html/css/load.php' to '/usr/local/maldetect/quarantine/load.php.804120070' Apr 20 04:33:23 root maldet(27621): {scan} scan completed on : files 17160, malware hits 1, cleaned hits 0, time 2373s Apr 20 04:33:23 root maldet(27621): {scan} scan report saved, to view run: maldet --report 220420-0353.27621 Apr 20 17:40:02 root maldet(12545): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 20 17:40:02 root maldet(12545): {scan} building file list for /home/aftptarun/public_html, this might take awhile... Apr 20 17:40:02 root maldet(12545): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 20 17:40:02 root maldet(12545): {scan} executed eval /usr/bin/nice -n 19 /usr/bin/ionice -c2 -n 6 /usr/bin/find "/home/aftptarun/public_html" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 20 17:40:40 root maldet(12545): {scan} file list completed in 38s, found 40948 files... Apr 20 17:40:40 root maldet(12545): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 20 17:40:40 root maldet(12545): {scan} scan of /home/aftptarun/public_html (40948 files) in progress... Apr 20 17:48:50 root maldet(12545): {scan} scan completed on /home/aftptarun/public_html: files 40948, malware hits 0, cleaned hits 0, time 529s Apr 20 17:48:50 root maldet(12545): {scan} scan report saved, to view run: maldet --report 220420-1740.12545 Apr 21 03:32:21 root maldet(17280): {update} checking for available updates... Apr 21 03:32:22 root maldet(17280): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 21 03:32:22 root maldet(17280): {update} hashing install files and checking against server... Apr 21 03:32:22 root maldet(17280): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 21 03:32:22 root maldet(17280): {update} latest version already installed. Apr 21 03:32:22 root maldet(17419): {sigup} performing signature update check... Apr 21 03:32:22 root maldet(17419): {sigup} local signature set is version 202204193564023 Apr 21 03:32:23 root maldet(17419): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 21 03:32:23 root maldet(17419): {sigup} latest signature set already installed Apr 21 03:32:23 root maldet(17544): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 21 03:32:23 root maldet(17544): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 21 03:32:23 root maldet(17544): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 21 03:32:23 root maldet(17544): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 21 03:32:23 root maldet(17544): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 21 03:32:27 root maldet(17544): {scan} file list completed in 4s, found 23475 files... Apr 21 03:32:27 root maldet(17544): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 21 03:32:27 root maldet(17544): {scan} scan of (23475 files) in progress... Apr 21 03:34:42 root maldet(17544): {scan} scan completed on : files 23475, malware hits 0, cleaned hits 0, time 139s Apr 21 03:34:42 root maldet(17544): {scan} scan report saved, to view run: maldet --report 220421-0332.17544 Apr 22 03:15:59 root maldet(1628): {update} checking for available updates... Apr 22 03:15:59 root maldet(1628): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 22 03:15:59 root maldet(1628): {update} hashing install files and checking against server... Apr 22 03:16:00 root maldet(1628): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 22 03:16:00 root maldet(1628): {update} latest version already installed. Apr 22 03:16:00 root maldet(1761): {sigup} performing signature update check... Apr 22 03:16:00 root maldet(1761): {sigup} local signature set is version 202204193564023 Apr 22 03:16:00 root maldet(1761): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 22 03:16:00 root maldet(1761): {sigup} latest signature set already installed Apr 22 03:16:00 root maldet(1875): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 22 03:16:01 root maldet(1875): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 22 03:16:01 root maldet(1875): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 22 03:16:01 root maldet(1875): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 22 03:16:01 root maldet(1875): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 22 03:16:05 root maldet(1875): {scan} file list completed in 4s, found 123624 files... Apr 22 03:16:05 root maldet(1875): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 22 03:16:05 root maldet(1875): {scan} scan of (123624 files) in progress... Apr 22 03:18:48 root maldet(1875): {scan} scan completed on : files 123624, malware hits 0, cleaned hits 0, time 167s Apr 22 03:18:48 root maldet(1875): {scan} scan report saved, to view run: maldet --report 220422-0316.1875 Apr 23 03:35:47 root maldet(27623): {update} checking for available updates... Apr 23 03:35:47 root maldet(27623): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 23 03:35:47 root maldet(27623): {update} hashing install files and checking against server... Apr 23 03:35:48 root maldet(27623): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 23 03:35:48 root maldet(27623): {update} latest version already installed. Apr 23 03:35:48 root maldet(27779): {sigup} performing signature update check... Apr 23 03:35:48 root maldet(27779): {sigup} local signature set is version 202204193564023 Apr 23 03:35:48 root maldet(27779): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 23 03:35:48 root maldet(27779): {sigup} new signature set 2022042249464 available Apr 23 03:35:48 root maldet(27779): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 23 03:35:49 root maldet(27779): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 23 03:35:49 root maldet(27779): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 23 03:35:49 root maldet(27779): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 23 03:35:49 root maldet(27779): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 23 03:35:50 root maldet(27779): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 23 03:35:50 root maldet(27779): {sigup} verified md5sum of maldet-sigpack.tgz Apr 23 03:35:50 root maldet(27779): {sigup} unpacked and installed maldet-sigpack.tgz Apr 23 03:35:50 root maldet(27779): {sigup} verified md5sum of maldet-clean.tgz Apr 23 03:35:50 root maldet(27779): {sigup} unpacked and installed maldet-clean.tgz Apr 23 03:35:50 root maldet(27779): {sigup} signature set update completed Apr 23 03:35:50 root maldet(27779): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 23 03:35:50 root maldet(28079): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 23 03:35:50 root maldet(28079): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 23 03:35:50 root maldet(28079): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 23 03:35:50 root maldet(28079): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 23 03:35:50 root maldet(28079): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 23 03:35:55 root maldet(28079): {scan} file list completed in 5s, found 20828 files... Apr 23 03:35:55 root maldet(28079): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 23 03:35:55 root maldet(28079): {scan} scan of (20828 files) in progress... Apr 23 03:36:25 root maldet(28079): {hit} malware hit {HEX}php.nested.base64.637 found for /home/mender/public_html/css/load.php Apr 23 03:36:25 root maldet(28079): {quar} malware quarantined from '/home/mender/public_html/css/load.php' to '/usr/local/maldetect/quarantine/load.php.224789159' Apr 23 03:36:25 root maldet(28079): {scan} scan completed on : files 20828, malware hits 1, cleaned hits 0, time 35s Apr 23 03:36:25 root maldet(28079): {scan} scan report saved, to view run: maldet --report 220423-0335.28079 Apr 24 03:18:28 root maldet(1271): {update} checking for available updates... Apr 24 03:18:29 root maldet(1271): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 24 03:18:29 root maldet(1271): {update} hashing install files and checking against server... Apr 24 03:18:29 root maldet(1271): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 24 03:18:29 root maldet(1271): {update} latest version already installed. Apr 24 03:18:29 root maldet(1412): {sigup} performing signature update check... Apr 24 03:18:29 root maldet(1412): {sigup} local signature set is version 2022042249464 Apr 24 03:18:30 root maldet(1412): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 24 03:18:30 root maldet(1412): {sigup} latest signature set already installed Apr 24 03:18:30 root maldet(1555): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 24 03:18:30 root maldet(1555): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 24 03:18:30 root maldet(1555): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 24 03:18:30 root maldet(1555): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 24 03:18:30 root maldet(1555): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 24 03:29:00 root maldet(1555): {scan} file list completed in 630s, found 21101 files... Apr 24 03:29:00 root maldet(1555): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 24 03:29:00 root maldet(1555): {scan} scan of (21101 files) in progress... Apr 24 03:40:40 root maldet(1555): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Apr 24 03:40:40 root maldet(1555): {scan} scan completed on : files 21101, malware hits 0, cleaned hits 0, time 1330s Apr 24 03:40:40 root maldet(1555): {scan} scan report saved, to view run: maldet --report 220424-0318.1555 Apr 25 03:14:29 root maldet(1776): {update} checking for available updates... Apr 25 03:14:29 root maldet(1776): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 25 03:14:29 root maldet(1776): {update} hashing install files and checking against server... Apr 25 03:14:29 root maldet(1776): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 25 03:14:29 root maldet(1776): {update} latest version already installed. Apr 25 03:14:29 root maldet(1914): {sigup} performing signature update check... Apr 25 03:14:29 root maldet(1914): {sigup} local signature set is version 2022042249464 Apr 25 03:14:30 root maldet(1914): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 25 03:14:30 root maldet(1914): {sigup} latest signature set already installed Apr 25 03:14:30 root maldet(2097): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 25 03:14:31 root maldet(2097): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 25 03:14:31 root maldet(2097): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 25 03:14:31 root maldet(2097): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 25 03:14:31 root maldet(2097): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 25 03:14:35 root maldet(2097): {scan} file list completed in 4s, found 80 files... Apr 25 03:14:35 root maldet(2097): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 25 03:14:35 root maldet(2097): {scan} scan of (80 files) in progress... Apr 25 03:14:45 root maldet(2097): {scan} scan completed on : files 80, malware hits 0, cleaned hits 0, time 15s Apr 25 03:14:45 root maldet(2097): {scan} scan report saved, to view run: maldet --report 220425-0314.2097 Apr 26 03:36:12 root maldet(26645): {update} checking for available updates... Apr 26 03:36:13 root maldet(26645): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 26 03:36:13 root maldet(26645): {update} hashing install files and checking against server... Apr 26 03:36:13 root maldet(26645): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 26 03:36:13 root maldet(26645): {update} latest version already installed. Apr 26 03:36:13 root maldet(26785): {sigup} performing signature update check... Apr 26 03:36:13 root maldet(26785): {sigup} local signature set is version 2022042249464 Apr 26 03:36:14 root maldet(26785): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 26 03:36:14 root maldet(26785): {sigup} new signature set 20220425730717 available Apr 26 03:36:14 root maldet(26785): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 26 03:36:15 root maldet(26785): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 26 03:36:15 root maldet(26785): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 26 03:36:15 root maldet(26785): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 26 03:36:15 root maldet(26785): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 26 03:36:16 root maldet(26785): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 26 03:36:16 root maldet(26785): {sigup} verified md5sum of maldet-sigpack.tgz Apr 26 03:36:18 root maldet(26785): {sigup} unpacked and installed maldet-sigpack.tgz Apr 26 03:36:18 root maldet(26785): {sigup} verified md5sum of maldet-clean.tgz Apr 26 03:36:18 root maldet(26785): {sigup} unpacked and installed maldet-clean.tgz Apr 26 03:36:18 root maldet(26785): {sigup} signature set update completed Apr 26 03:36:18 root maldet(26785): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 26 03:36:18 root maldet(27054): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 26 03:36:18 root maldet(27054): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 26 03:36:18 root maldet(27054): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 26 03:36:18 root maldet(27054): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 26 03:36:18 root maldet(27054): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 26 03:36:22 root maldet(27054): {scan} file list completed in 4s, found 164 files... Apr 26 03:36:22 root maldet(27054): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 26 03:36:22 root maldet(27054): {scan} scan of (164 files) in progress... Apr 26 03:36:37 root maldet(27054): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Apr 26 03:36:37 root maldet(27054): {scan} scan completed on : files 164, malware hits 0, cleaned hits 0, time 19s Apr 26 03:36:37 root maldet(27054): {scan} scan report saved, to view run: maldet --report 220426-0336.27054 Apr 27 03:48:26 root maldet(1322): {update} checking for available updates... Apr 27 03:48:27 root maldet(1322): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 27 03:48:27 root maldet(1322): {update} hashing install files and checking against server... Apr 27 03:48:27 root maldet(1322): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 27 03:48:27 root maldet(1322): {update} latest version already installed. Apr 27 03:48:27 root maldet(1460): {sigup} performing signature update check... Apr 27 03:48:27 root maldet(1460): {sigup} local signature set is version 20220425730717 Apr 27 03:48:28 root maldet(1460): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 27 03:48:28 root maldet(1460): {sigup} latest signature set already installed Apr 27 03:48:28 root maldet(1572): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 27 03:48:29 root maldet(1572): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 27 03:48:29 root maldet(1572): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 27 03:48:29 root maldet(1572): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 27 03:48:29 root maldet(1572): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 27 03:52:16 root maldet(1572): {scan} file list completed in 227s, found 283 files... Apr 27 03:52:16 root maldet(1572): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 27 03:52:16 root maldet(1572): {scan} scan of (283 files) in progress... Apr 27 03:52:59 root maldet(1572): {hit} malware hit {YARA}webshell_webshell_cnseay02_1 found for /home/agarwalt/public_html/wp-booking.php Apr 27 03:52:59 root maldet(1572): {quar} malware quarantined from '/home/agarwalt/public_html/wp-booking.php' to '/usr/local/maldetect/quarantine/wp-booking.php.57822473' Apr 27 03:53:00 root maldet(1572): {scan} scan completed on : files 283, malware hits 1, cleaned hits 0, time 271s Apr 27 03:53:00 root maldet(1572): {scan} scan report saved, to view run: maldet --report 220427-0348.1572 Apr 28 03:33:01 root maldet(4494): {update} checking for available updates... Apr 28 03:33:02 root maldet(4494): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 28 03:33:02 root maldet(4494): {update} hashing install files and checking against server... Apr 28 03:33:02 root maldet(4494): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 28 03:33:02 root maldet(4494): {update} latest version already installed. Apr 28 03:33:02 root maldet(4635): {sigup} performing signature update check... Apr 28 03:33:02 root maldet(4635): {sigup} local signature set is version 20220425730717 Apr 28 03:33:03 root maldet(4635): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 28 03:33:03 root maldet(4635): {sigup} latest signature set already installed Apr 28 03:33:03 root maldet(4748): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 28 03:33:04 root maldet(4748): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 28 03:33:04 root maldet(4748): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 28 03:33:04 root maldet(4748): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 28 03:33:04 root maldet(4748): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 28 03:33:09 root maldet(4748): {scan} file list completed in 5s, found 3905 files... Apr 28 03:33:09 root maldet(4748): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 28 03:33:09 root maldet(4748): {scan} scan of (3905 files) in progress... Apr 28 03:34:04 root maldet(4748): {scan} scan completed on : files 3905, malware hits 0, cleaned hits 0, time 61s Apr 28 03:34:04 root maldet(4748): {scan} scan report saved, to view run: maldet --report 220428-0333.4748 Apr 29 03:18:01 root maldet(13804): {update} checking for available updates... Apr 29 03:18:01 root maldet(13804): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 29 03:18:01 root maldet(13804): {update} hashing install files and checking against server... Apr 29 03:18:01 root maldet(13804): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 29 03:18:02 root maldet(13804): {update} latest version already installed. Apr 29 03:18:02 root maldet(13948): {sigup} performing signature update check... Apr 29 03:18:02 root maldet(13948): {sigup} local signature set is version 20220425730717 Apr 29 03:18:02 root maldet(13948): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 29 03:18:02 root maldet(13948): {sigup} new signature set 202204281411428 available Apr 29 03:18:02 root maldet(13948): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 29 03:18:03 root maldet(13948): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 29 03:18:03 root maldet(13948): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 29 03:18:03 root maldet(13948): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 29 03:18:03 root maldet(13948): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 29 03:18:04 root maldet(13948): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 29 03:18:04 root maldet(13948): {sigup} verified md5sum of maldet-sigpack.tgz Apr 29 03:18:04 root maldet(13948): {sigup} unpacked and installed maldet-sigpack.tgz Apr 29 03:18:04 root maldet(13948): {sigup} verified md5sum of maldet-clean.tgz Apr 29 03:18:04 root maldet(13948): {sigup} unpacked and installed maldet-clean.tgz Apr 29 03:18:04 root maldet(13948): {sigup} signature set update completed Apr 29 03:18:04 root maldet(13948): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 29 03:18:04 root maldet(14194): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 29 03:18:04 root maldet(14194): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 29 03:18:04 root maldet(14194): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 29 03:18:04 root maldet(14194): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 29 03:18:04 root maldet(14194): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 29 03:18:09 root maldet(14194): {scan} file list completed in 5s, found 4584 files... Apr 29 03:18:09 root maldet(14194): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 29 03:18:09 root maldet(14194): {scan} scan of (4584 files) in progress... Apr 29 03:19:38 root maldet(14194): {scan} scan completed on : files 4584, malware hits 0, cleaned hits 0, time 94s Apr 29 03:19:38 root maldet(14194): {scan} scan report saved, to view run: maldet --report 220429-0318.14194 Apr 30 03:24:35 root maldet(1826): {update} checking for available updates... Apr 30 03:24:35 root maldet(1826): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 30 03:24:35 root maldet(1826): {update} hashing install files and checking against server... Apr 30 03:24:36 root maldet(1826): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 30 03:24:36 root maldet(1826): {update} latest version already installed. Apr 30 03:24:36 root maldet(1967): {sigup} performing signature update check... Apr 30 03:24:36 root maldet(1967): {sigup} local signature set is version 202204281411428 Apr 30 03:24:36 root maldet(1967): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 30 03:24:36 root maldet(1967): {sigup} latest signature set already installed Apr 30 03:24:36 root maldet(2086): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 30 03:24:37 root maldet(2086): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Apr 30 03:24:37 root maldet(2086): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Apr 30 03:24:37 root maldet(2086): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 30 03:24:37 root maldet(2086): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 30 03:24:41 root maldet(2086): {scan} file list completed in 4s, found 127885 files... Apr 30 03:24:41 root maldet(2086): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 30 03:24:41 root maldet(2086): {scan} scan of (127885 files) in progress... Apr 30 03:29:21 root maldet(2086): {scan} scan completed on : files 127885, malware hits 0, cleaned hits 0, time 285s Apr 30 03:29:21 root maldet(2086): {scan} scan report saved, to view run: maldet --report 220430-0324.2086 May 01 03:34:09 root maldet(14471): {update} checking for available updates... May 01 03:34:09 root maldet(14471): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 01 03:34:09 root maldet(14471): {update} hashing install files and checking against server... May 01 03:34:10 root maldet(14471): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 01 03:34:10 root maldet(14471): {update} latest version already installed. May 01 03:34:10 root maldet(14757): {sigup} performing signature update check... May 01 03:34:10 root maldet(14757): {sigup} local signature set is version 202204281411428 May 01 03:34:11 root maldet(14757): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 01 03:34:11 root maldet(14757): {sigup} latest signature set already installed May 01 03:34:11 root maldet(14897): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 01 03:34:14 root maldet(14897): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 01 03:34:14 root maldet(14897): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 01 03:34:14 root maldet(14897): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 01 03:34:14 root maldet(14897): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 01 03:47:11 root maldet(14897): {scan} file list completed in 777s, found 105796 files... May 01 03:47:11 root maldet(14897): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 01 03:47:11 root maldet(14897): {scan} scan of (105796 files) in progress... May 01 04:26:03 root maldet(14897): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! May 01 04:26:03 root maldet(14897): {scan} scan completed on : files 105796, malware hits 0, cleaned hits 0, time 3112s May 01 04:26:03 root maldet(14897): {scan} scan report saved, to view run: maldet --report 220501-0334.14897 May 02 03:22:32 root maldet(4404): {update} checking for available updates... May 02 03:22:33 root maldet(4404): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 02 03:22:33 root maldet(4404): {update} hashing install files and checking against server... May 02 03:22:33 root maldet(4404): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 02 03:22:33 root maldet(4404): {update} latest version already installed. May 02 03:22:33 root maldet(4557): {sigup} performing signature update check... May 02 03:22:33 root maldet(4557): {sigup} local signature set is version 202204281411428 May 02 03:22:34 root maldet(4557): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 02 03:22:34 root maldet(4557): {sigup} new signature set 20220501475688 available May 02 03:22:34 root maldet(4557): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 02 03:22:34 root maldet(4557): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 02 03:22:34 root maldet(4557): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 02 03:22:34 root maldet(4557): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 02 03:22:35 root maldet(4557): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 02 03:22:35 root maldet(4557): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 02 03:22:35 root maldet(4557): {sigup} verified md5sum of maldet-sigpack.tgz May 02 03:22:35 root maldet(4557): {sigup} unpacked and installed maldet-sigpack.tgz May 02 03:22:35 root maldet(4557): {sigup} verified md5sum of maldet-clean.tgz May 02 03:22:35 root maldet(4557): {sigup} unpacked and installed maldet-clean.tgz May 02 03:22:35 root maldet(4557): {sigup} signature set update completed May 02 03:22:35 root maldet(4557): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 02 03:22:35 root maldet(4816): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 02 03:22:36 root maldet(4816): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 02 03:22:36 root maldet(4816): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 02 03:22:36 root maldet(4816): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 02 03:22:36 root maldet(4816): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 02 03:22:41 root maldet(4816): {scan} file list completed in 5s, found 317 files... May 02 03:22:41 root maldet(4816): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 02 03:22:41 root maldet(4816): {scan} scan of (317 files) in progress... May 02 03:22:56 root maldet(4816): {scan} scan completed on : files 317, malware hits 0, cleaned hits 0, time 20s May 02 03:22:56 root maldet(4816): {scan} scan report saved, to view run: maldet --report 220502-0322.4816 May 03 03:33:56 root maldet(1149): {update} checking for available updates... May 03 03:33:57 root maldet(1149): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 03 03:33:57 root maldet(1149): {update} hashing install files and checking against server... May 03 03:33:57 root maldet(1149): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 03 03:33:57 root maldet(1149): {update} latest version already installed. May 03 03:33:57 root maldet(1290): {sigup} performing signature update check... May 03 03:33:57 root maldet(1290): {sigup} local signature set is version 20220501475688 May 03 03:33:58 root maldet(1290): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 03 03:33:58 root maldet(1290): {sigup} latest signature set already installed May 03 03:33:58 root maldet(1406): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 03 03:33:58 root maldet(1406): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 03 03:33:58 root maldet(1406): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 03 03:33:58 root maldet(1406): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 03 03:33:58 root maldet(1406): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 03 03:34:03 root maldet(1406): {scan} file list completed in 5s, found 143 files... May 03 03:34:03 root maldet(1406): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 03 03:34:03 root maldet(1406): {scan} scan of (143 files) in progress... May 03 03:34:11 root maldet(1406): {scan} scan completed on : files 143, malware hits 0, cleaned hits 0, time 13s May 03 03:34:11 root maldet(1406): {scan} scan report saved, to view run: maldet --report 220503-0333.1406 May 04 03:50:46 root maldet(17827): {update} checking for available updates... May 04 03:50:47 root maldet(17827): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 04 03:50:47 root maldet(17827): {update} hashing install files and checking against server... May 04 03:50:47 root maldet(17827): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 04 03:50:47 root maldet(17827): {update} latest version already installed. May 04 03:50:47 root maldet(17968): {sigup} performing signature update check... May 04 03:50:47 root maldet(17968): {sigup} local signature set is version 20220501475688 May 04 03:50:48 root maldet(17968): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 04 03:50:48 root maldet(17968): {sigup} latest signature set already installed May 04 03:50:48 root maldet(18079): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 04 03:50:50 root maldet(18079): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 04 03:50:50 root maldet(18079): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 04 03:50:50 root maldet(18079): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 04 03:50:50 root maldet(18079): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 04 04:19:48 root maldet(18079): {scan} file list completed in 1738s, found 41387 files... May 04 04:19:48 root maldet(18079): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 04 04:19:48 root maldet(18079): {scan} scan of (41387 files) in progress... May 04 04:28:12 root maldet(18079): {scan} scan completed on : files 41387, malware hits 0, cleaned hits 0, time 2244s May 04 04:28:12 root maldet(18079): {scan} scan report saved, to view run: maldet --report 220504-0350.18079 May 05 03:13:57 root maldet(11757): {update} checking for available updates... May 05 03:13:58 root maldet(11757): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 05 03:13:58 root maldet(11757): {update} hashing install files and checking against server... May 05 03:13:58 root maldet(11757): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 05 03:13:58 root maldet(11757): {update} latest version already installed. May 05 03:13:58 root maldet(11896): {sigup} performing signature update check... May 05 03:13:58 root maldet(11896): {sigup} local signature set is version 20220501475688 May 05 03:13:59 root maldet(11896): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 05 03:13:59 root maldet(11896): {sigup} new signature set 20220504525938 available May 05 03:13:59 root maldet(11896): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 05 03:14:00 root maldet(11896): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 05 03:14:00 root maldet(11896): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 05 03:14:00 root maldet(11896): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 05 03:14:00 root maldet(11896): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 05 03:14:01 root maldet(11896): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 05 03:14:01 root maldet(11896): {sigup} verified md5sum of maldet-sigpack.tgz May 05 03:14:01 root maldet(11896): {sigup} unpacked and installed maldet-sigpack.tgz May 05 03:14:01 root maldet(11896): {sigup} verified md5sum of maldet-clean.tgz May 05 03:14:01 root maldet(11896): {sigup} unpacked and installed maldet-clean.tgz May 05 03:14:01 root maldet(11896): {sigup} signature set update completed May 05 03:14:01 root maldet(11896): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 05 03:14:01 root maldet(12148): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 05 03:14:01 root maldet(12148): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 05 03:14:01 root maldet(12148): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 05 03:14:01 root maldet(12148): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 05 03:14:02 root maldet(12148): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 05 03:14:07 root maldet(12148): {scan} file list completed in 5s, found 20748 files... May 05 03:14:07 root maldet(12148): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 05 03:14:07 root maldet(12148): {scan} scan of (20748 files) in progress... May 05 03:15:02 root maldet(12148): {scan} scan completed on : files 20748, malware hits 0, cleaned hits 0, time 61s May 05 03:15:02 root maldet(12148): {scan} scan report saved, to view run: maldet --report 220505-0314.12148 May 06 03:15:28 root maldet(5869): {update} checking for available updates... May 06 03:15:28 root maldet(5869): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 06 03:15:28 root maldet(5869): {update} hashing install files and checking against server... May 06 03:15:29 root maldet(5869): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 06 03:15:29 root maldet(5869): {update} latest version already installed. May 06 03:15:29 root maldet(6026): {sigup} performing signature update check... May 06 03:15:29 root maldet(6026): {sigup} local signature set is version 20220504525938 May 06 03:15:29 root maldet(6026): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 06 03:15:29 root maldet(6026): {sigup} latest signature set already installed May 06 03:15:29 root maldet(6144): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 06 03:15:29 root maldet(6144): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 06 03:15:29 root maldet(6144): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 06 03:15:29 root maldet(6144): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 06 03:15:29 root maldet(6144): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 06 03:15:34 root maldet(6144): {scan} file list completed in 5s, found 182 files... May 06 03:15:34 root maldet(6144): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 06 03:15:34 root maldet(6144): {scan} scan of (182 files) in progress... May 06 03:15:44 root maldet(6144): {scan} scan completed on : files 182, malware hits 0, cleaned hits 0, time 15s May 06 03:15:44 root maldet(6144): {scan} scan report saved, to view run: maldet --report 220506-0315.6144 May 07 03:36:59 root maldet(10047): {update} checking for available updates... May 07 03:37:00 root maldet(10047): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 07 03:37:00 root maldet(10047): {update} hashing install files and checking against server... May 07 03:37:00 root maldet(10047): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 07 03:37:00 root maldet(10047): {update} latest version already installed. May 07 03:37:00 root maldet(10181): {sigup} performing signature update check... May 07 03:37:00 root maldet(10181): {sigup} local signature set is version 20220504525938 May 07 03:37:01 root maldet(10181): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 07 03:37:01 root maldet(10181): {sigup} latest signature set already installed May 07 03:37:01 root maldet(10306): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 07 03:37:01 root maldet(10306): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 07 03:37:01 root maldet(10306): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 07 03:37:01 root maldet(10306): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 07 03:37:01 root maldet(10306): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 07 03:37:06 root maldet(10306): {scan} file list completed in 5s, found 12167 files... May 07 03:37:06 root maldet(10306): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 07 03:37:06 root maldet(10306): {scan} scan of (12167 files) in progress... May 07 03:39:30 root maldet(10306): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! May 07 03:39:30 root maldet(10306): {scan} scan completed on : files 12167, malware hits 0, cleaned hits 0, time 149s May 07 03:39:30 root maldet(10306): {scan} scan report saved, to view run: maldet --report 220507-0337.10306 May 08 03:28:32 root maldet(21435): {update} checking for available updates... May 08 03:28:33 root maldet(21435): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 08 03:28:33 root maldet(21435): {update} hashing install files and checking against server... May 08 03:28:34 root maldet(21435): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 08 03:28:34 root maldet(21435): {update} latest version already installed. May 08 03:28:34 root maldet(21605): {sigup} performing signature update check... May 08 03:28:34 root maldet(21605): {sigup} local signature set is version 20220504525938 May 08 03:28:34 root maldet(21605): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 08 03:28:35 root maldet(21605): {sigup} new signature set 202205071229640 available May 08 03:28:35 root maldet(21605): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 08 03:28:35 root maldet(21605): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 08 03:28:35 root maldet(21605): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 08 03:28:35 root maldet(21605): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 08 03:28:36 root maldet(21605): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 08 03:28:36 root maldet(21605): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 08 03:28:36 root maldet(21605): {sigup} verified md5sum of maldet-sigpack.tgz May 08 03:28:36 root maldet(21605): {sigup} unpacked and installed maldet-sigpack.tgz May 08 03:28:36 root maldet(21605): {sigup} verified md5sum of maldet-clean.tgz May 08 03:28:36 root maldet(21605): {sigup} unpacked and installed maldet-clean.tgz May 08 03:28:36 root maldet(21605): {sigup} signature set update completed May 08 03:28:36 root maldet(21605): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 08 03:28:36 root maldet(21958): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 08 03:28:37 root maldet(21958): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 08 03:28:37 root maldet(21958): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 08 03:28:37 root maldet(21958): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 08 03:28:38 root maldet(21958): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 08 03:44:36 root maldet(21958): {scan} file list completed in 958s, found 5649 files... May 08 03:44:36 root maldet(21958): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 08 03:44:36 root maldet(21958): {scan} scan of (5649 files) in progress... May 08 03:45:40 root maldet(21958): {scan} scan completed on : files 5649, malware hits 0, cleaned hits 0, time 1024s May 08 03:45:40 root maldet(21958): {scan} scan report saved, to view run: maldet --report 220508-0328.21958 May 09 03:52:53 root maldet(15749): {update} checking for available updates... May 09 03:52:53 root maldet(15749): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 09 03:52:53 root maldet(15749): {update} hashing install files and checking against server... May 09 03:52:53 root maldet(15749): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 09 03:52:54 root maldet(15749): {update} latest version already installed. May 09 03:52:54 root maldet(15889): {sigup} performing signature update check... May 09 03:52:54 root maldet(15889): {sigup} local signature set is version 202205071229640 May 09 03:52:54 root maldet(15889): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 09 03:52:54 root maldet(15889): {sigup} latest signature set already installed May 09 03:52:54 root maldet(16011): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 09 03:52:56 root maldet(16011): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 09 03:52:56 root maldet(16011): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 09 03:52:56 root maldet(16011): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 09 03:52:56 root maldet(16011): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 09 03:53:03 root maldet(16011): {scan} file list completed in 7s, found 23587 files... May 09 03:53:05 root maldet(16011): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 09 03:53:05 root maldet(16011): {scan} scan of (23587 files) in progress... May 09 03:54:21 root maldet(16011): {scan} scan completed on : files 23587, malware hits 0, cleaned hits 0, time 85s May 09 03:54:21 root maldet(16011): {scan} scan report saved, to view run: maldet --report 220509-0352.16011 May 10 03:19:19 root maldet(29621): {update} checking for available updates... May 10 03:19:19 root maldet(29621): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 10 03:19:19 root maldet(29621): {update} hashing install files and checking against server... May 10 03:19:20 root maldet(29621): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 10 03:19:20 root maldet(29621): {update} latest version already installed. May 10 03:19:20 root maldet(29758): {sigup} performing signature update check... May 10 03:19:20 root maldet(29758): {sigup} local signature set is version 202205071229640 May 10 03:19:20 root maldet(29758): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 10 03:19:20 root maldet(29758): {sigup} latest signature set already installed May 10 03:19:21 root maldet(29881): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 10 03:19:21 root maldet(29881): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 10 03:19:21 root maldet(29881): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 10 03:19:21 root maldet(29881): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 10 03:19:21 root maldet(29881): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 10 03:19:26 root maldet(29881): {scan} file list completed in 5s, found 95 files... May 10 03:19:26 root maldet(29881): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 10 03:19:26 root maldet(29881): {scan} scan of (95 files) in progress... May 10 03:19:33 root maldet(29881): {scan} scan completed on : files 95, malware hits 0, cleaned hits 0, time 12s May 10 03:19:33 root maldet(29881): {scan} scan report saved, to view run: maldet --report 220510-0319.29881 May 11 03:12:13 root maldet(28021): {update} checking for available updates... May 11 03:12:14 root maldet(28021): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 11 03:12:14 root maldet(28021): {update} hashing install files and checking against server... May 11 03:12:15 root maldet(28021): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 11 03:12:15 root maldet(28021): {update} latest version already installed. May 11 03:12:15 root maldet(28165): {sigup} performing signature update check... May 11 03:12:15 root maldet(28165): {sigup} local signature set is version 202205071229640 May 11 03:12:15 root maldet(28165): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 11 03:12:16 root maldet(28165): {sigup} new signature set 20220510467130 available May 11 03:12:16 root maldet(28165): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 11 03:12:16 root maldet(28165): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 11 03:12:17 root maldet(28165): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 11 03:12:17 root maldet(28165): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 11 03:12:17 root maldet(28165): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 11 03:12:17 root maldet(28165): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 11 03:12:17 root maldet(28165): {sigup} verified md5sum of maldet-sigpack.tgz May 11 03:12:24 root maldet(28165): {sigup} unpacked and installed maldet-sigpack.tgz May 11 03:12:24 root maldet(28165): {sigup} verified md5sum of maldet-clean.tgz May 11 03:12:24 root maldet(28165): {sigup} unpacked and installed maldet-clean.tgz May 11 03:12:24 root maldet(28165): {sigup} signature set update completed May 11 03:12:24 root maldet(28165): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 11 03:12:24 root maldet(28445): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 11 03:12:25 root maldet(28445): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 11 03:12:25 root maldet(28445): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 11 03:12:25 root maldet(28445): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 11 03:12:25 root maldet(28445): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 11 03:25:14 root maldet(28445): {scan} file list completed in 769s, found 21892 files... May 11 03:25:14 root maldet(28445): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 11 03:25:14 root maldet(28445): {scan} scan of (21892 files) in progress... May 11 03:27:04 root maldet(28445): {scan} scan completed on : files 21892, malware hits 0, cleaned hits 0, time 880s May 11 03:27:04 root maldet(28445): {scan} scan report saved, to view run: maldet --report 220511-0312.28445 May 12 03:33:30 root maldet(1932): {update} checking for available updates... May 12 03:33:30 root maldet(1932): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 12 03:33:30 root maldet(1932): {update} hashing install files and checking against server... May 12 03:33:31 root maldet(1932): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 12 03:33:31 root maldet(1932): {update} latest version already installed. May 12 03:33:31 root maldet(2073): {sigup} performing signature update check... May 12 03:33:31 root maldet(2073): {sigup} local signature set is version 20220510467130 May 12 03:33:32 root maldet(2073): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 12 03:33:32 root maldet(2073): {sigup} latest signature set already installed May 12 03:33:32 root maldet(2187): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 12 03:33:32 root maldet(2187): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 12 03:33:32 root maldet(2187): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 12 03:33:32 root maldet(2187): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 12 03:33:32 root maldet(2187): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 12 03:33:38 root maldet(2187): {scan} file list completed in 6s, found 300 files... May 12 03:33:38 root maldet(2187): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 12 03:33:38 root maldet(2187): {scan} scan of (300 files) in progress... May 12 03:33:49 root maldet(2187): {hit} malware hit {HEX}php.nested.base64.637 found for /home/mender/public_html/css/load.php May 12 03:33:49 root maldet(2187): {quar} malware quarantined from '/home/mender/public_html/css/load.php' to '/usr/local/maldetect/quarantine/load.php.1313826296' May 12 03:33:50 root maldet(2187): {scan} scan completed on : files 300, malware hits 1, cleaned hits 0, time 17s May 12 03:33:50 root maldet(2187): {scan} scan report saved, to view run: maldet --report 220512-0333.2187 May 13 03:25:56 root maldet(25989): {update} checking for available updates... May 13 03:25:56 root maldet(25989): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 13 03:25:56 root maldet(25989): {update} hashing install files and checking against server... May 13 03:25:57 root maldet(25989): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 13 03:25:57 root maldet(25989): {update} latest version already installed. May 13 03:25:57 root maldet(26128): {sigup} performing signature update check... May 13 03:25:57 root maldet(26128): {sigup} local signature set is version 20220510467130 May 13 03:25:57 root maldet(26128): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 13 03:25:57 root maldet(26128): {sigup} latest signature set already installed May 13 03:25:57 root maldet(26241): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 13 03:25:58 root maldet(26241): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 13 03:25:58 root maldet(26241): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 13 03:25:58 root maldet(26241): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 13 03:25:58 root maldet(26241): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 13 03:26:03 root maldet(26241): {scan} file list completed in 5s, found 355 files... May 13 03:26:03 root maldet(26241): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 13 03:26:03 root maldet(26241): {scan} scan of (355 files) in progress... May 13 03:26:12 root maldet(26241): {hit} malware hit {HEX}php.nested.base64.637 found for /home/mender/public_html/css/load.php May 13 03:26:12 root maldet(26241): {quar} malware quarantined from '/home/mender/public_html/css/load.php' to '/usr/local/maldetect/quarantine/load.php.623829467' May 13 03:26:12 root maldet(26241): {scan} scan completed on : files 355, malware hits 1, cleaned hits 0, time 15s May 13 03:26:12 root maldet(26241): {scan} scan report saved, to view run: maldet --report 220513-0325.26241 May 14 03:30:36 root maldet(13506): {update} checking for available updates... May 14 03:30:36 root maldet(13506): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 14 03:30:36 root maldet(13506): {update} hashing install files and checking against server... May 14 03:30:37 root maldet(13506): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 14 03:30:37 root maldet(13506): {update} latest version already installed. May 14 03:30:37 root maldet(13643): {sigup} performing signature update check... May 14 03:30:37 root maldet(13643): {sigup} local signature set is version 20220510467130 May 14 03:30:37 root maldet(13643): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 14 03:30:37 root maldet(13643): {sigup} new signature set 202205131196978 available May 14 03:30:37 root maldet(13643): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 14 03:30:38 root maldet(13643): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 14 03:30:38 root maldet(13643): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 14 03:30:38 root maldet(13643): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 14 03:30:38 root maldet(13643): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 14 03:30:39 root maldet(13643): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 14 03:30:39 root maldet(13643): {sigup} verified md5sum of maldet-sigpack.tgz May 14 03:30:39 root maldet(13643): {sigup} unpacked and installed maldet-sigpack.tgz May 14 03:30:39 root maldet(13643): {sigup} verified md5sum of maldet-clean.tgz May 14 03:30:39 root maldet(13643): {sigup} unpacked and installed maldet-clean.tgz May 14 03:30:39 root maldet(13643): {sigup} signature set update completed May 14 03:30:39 root maldet(13643): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 14 03:30:39 root maldet(13891): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 14 03:30:39 root maldet(13891): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 14 03:30:39 root maldet(13891): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 14 03:30:39 root maldet(13891): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 14 03:30:39 root maldet(13891): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 14 03:30:44 root maldet(13891): {scan} file list completed in 5s, found 84 files... May 14 03:30:44 root maldet(13891): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 14 03:30:44 root maldet(13891): {scan} scan of (84 files) in progress... May 14 03:30:53 root maldet(13891): {scan} scan completed on : files 84, malware hits 0, cleaned hits 0, time 14s May 14 03:30:53 root maldet(13891): {scan} scan report saved, to view run: maldet --report 220514-0330.13891 May 15 03:42:42 root maldet(12154): {update} checking for available updates... May 15 03:42:42 root maldet(12154): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 15 03:42:42 root maldet(12154): {update} hashing install files and checking against server... May 15 03:42:42 root maldet(12154): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 15 03:42:42 root maldet(12154): {update} latest version already installed. May 15 03:42:42 root maldet(12292): {sigup} performing signature update check... May 15 03:42:42 root maldet(12292): {sigup} local signature set is version 202205131196978 May 15 03:42:43 root maldet(12292): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 15 03:42:44 root maldet(12292): {sigup} latest signature set already installed May 15 03:42:44 root maldet(12423): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 15 03:42:46 root maldet(12423): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 15 03:42:46 root maldet(12423): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 15 03:42:46 root maldet(12423): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 15 03:42:46 root maldet(12423): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 15 03:56:44 root maldet(12423): {scan} file list completed in 838s, found 1270 files... May 15 03:56:44 root maldet(12423): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 15 03:56:44 root maldet(12423): {scan} scan of (1270 files) in progress... May 15 03:57:49 root maldet(12423): {scan} scan completed on : files 1270, malware hits 0, cleaned hits 0, time 905s May 15 03:57:49 root maldet(12423): {scan} scan report saved, to view run: maldet --report 220515-0342.12423 May 16 03:38:31 root maldet(16714): {update} checking for available updates... May 16 03:38:32 root maldet(16714): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 16 03:38:32 root maldet(16714): {update} hashing install files and checking against server... May 16 03:38:33 root maldet(16714): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 16 03:38:33 root maldet(16714): {update} latest version already installed. May 16 03:38:33 root maldet(16857): {sigup} performing signature update check... May 16 03:38:33 root maldet(16857): {sigup} local signature set is version 202205131196978 May 16 03:38:33 root maldet(16857): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 16 03:38:33 root maldet(16857): {sigup} latest signature set already installed May 16 03:38:34 root maldet(16971): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 16 03:38:34 root maldet(16971): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 16 03:38:34 root maldet(16971): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 16 03:38:34 root maldet(16971): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 16 03:38:34 root maldet(16971): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 16 03:38:39 root maldet(16971): {scan} file list completed in 5s, found 89 files... May 16 03:38:39 root maldet(16971): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 16 03:38:39 root maldet(16971): {scan} scan of (89 files) in progress... May 16 03:38:47 root maldet(16971): {scan} scan completed on : files 89, malware hits 0, cleaned hits 0, time 13s May 16 03:38:47 root maldet(16971): {scan} scan report saved, to view run: maldet --report 220516-0338.16971 May 17 03:16:42 root maldet(12806): {update} checking for available updates... May 17 03:16:42 root maldet(12806): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 17 03:16:42 root maldet(12806): {update} hashing install files and checking against server... May 17 03:16:43 root maldet(12806): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 17 03:16:43 root maldet(12806): {update} latest version already installed. May 17 03:16:43 root maldet(12946): {sigup} performing signature update check... May 17 03:16:43 root maldet(12946): {sigup} local signature set is version 202205131196978 May 17 03:16:43 root maldet(12946): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 17 03:16:43 root maldet(12946): {sigup} new signature set 202205161930838 available May 17 03:16:43 root maldet(12946): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 17 03:16:44 root maldet(12946): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 17 03:16:44 root maldet(12946): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 17 03:16:44 root maldet(12946): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 17 03:16:44 root maldet(12946): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 17 03:16:45 root maldet(12946): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 17 03:16:45 root maldet(12946): {sigup} verified md5sum of maldet-sigpack.tgz May 17 03:16:45 root maldet(12946): {sigup} unpacked and installed maldet-sigpack.tgz May 17 03:16:45 root maldet(12946): {sigup} verified md5sum of maldet-clean.tgz May 17 03:16:45 root maldet(12946): {sigup} unpacked and installed maldet-clean.tgz May 17 03:16:45 root maldet(12946): {sigup} signature set update completed May 17 03:16:45 root maldet(12946): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 17 03:16:45 root maldet(13195): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 17 03:16:45 root maldet(13195): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 17 03:16:45 root maldet(13195): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 17 03:16:45 root maldet(13195): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 17 03:16:45 root maldet(13195): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 17 03:16:51 root maldet(13195): {scan} file list completed in 6s, found 114 files... May 17 03:16:51 root maldet(13195): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 17 03:16:51 root maldet(13195): {scan} scan of (114 files) in progress... May 17 03:17:08 root maldet(13195): {scan} scan completed on : files 114, malware hits 0, cleaned hits 0, time 22s May 17 03:17:08 root maldet(13195): {scan} scan report saved, to view run: maldet --report 220517-0316.13195 May 18 03:20:47 root maldet(12342): {update} checking for available updates... May 18 03:20:47 root maldet(12342): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 18 03:20:47 root maldet(12342): {update} hashing install files and checking against server... May 18 03:20:48 root maldet(12342): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 18 03:20:48 root maldet(12342): {update} latest version already installed. May 18 03:20:48 root maldet(12481): {sigup} performing signature update check... May 18 03:20:48 root maldet(12481): {sigup} local signature set is version 202205161930838 May 18 03:20:48 root maldet(12481): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 18 03:20:49 root maldet(12481): {sigup} latest signature set already installed May 18 03:20:49 root maldet(12594): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 18 03:20:50 root maldet(12594): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 18 03:20:50 root maldet(12594): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 18 03:20:50 root maldet(12594): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 18 03:20:50 root maldet(12594): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 18 03:36:37 root maldet(12594): {scan} file list completed in 947s, found 115 files... May 18 03:36:37 root maldet(12594): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 18 03:36:37 root maldet(12594): {scan} scan of (115 files) in progress... May 18 03:36:50 root maldet(12594): {scan} scan completed on : files 115, malware hits 0, cleaned hits 0, time 961s May 18 03:36:50 root maldet(12594): {scan} scan report saved, to view run: maldet --report 220518-0320.12594 May 19 03:46:06 root maldet(13933): {update} checking for available updates... May 19 03:46:07 root maldet(13933): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 19 03:46:07 root maldet(13933): {update} hashing install files and checking against server... May 19 03:46:07 root maldet(13933): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 19 03:46:07 root maldet(13933): {update} latest version already installed. May 19 03:46:07 root maldet(14069): {sigup} performing signature update check... May 19 03:46:07 root maldet(14069): {sigup} local signature set is version 202205161930838 May 19 03:46:07 root maldet(14069): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 19 03:46:07 root maldet(14069): {sigup} latest signature set already installed May 19 03:46:08 root maldet(14181): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 19 03:46:09 root maldet(14181): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 19 03:46:09 root maldet(14181): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 19 03:46:09 root maldet(14181): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 19 03:46:09 root maldet(14181): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 19 03:46:14 root maldet(14181): {scan} file list completed in 5s, found 37980 files... May 19 03:46:14 root maldet(14181): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 19 03:46:14 root maldet(14181): {scan} scan of (37980 files) in progress... May 19 03:50:46 root maldet(14181): {scan} scan completed on : files 37980, malware hits 0, cleaned hits 0, time 278s May 19 03:50:46 root maldet(14181): {scan} scan report saved, to view run: maldet --report 220519-0346.14181 May 20 03:28:00 root maldet(12908): {update} checking for available updates... May 20 03:28:01 root maldet(12908): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 20 03:28:01 root maldet(12908): {update} hashing install files and checking against server... May 20 03:28:01 root maldet(12908): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 20 03:28:01 root maldet(12908): {update} latest version already installed. May 20 03:28:01 root maldet(13054): {sigup} performing signature update check... May 20 03:28:01 root maldet(13054): {sigup} local signature set is version 202205161930838 May 20 03:28:02 root maldet(13054): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 20 03:28:02 root maldet(13054): {sigup} new signature set 202205192660337 available May 20 03:28:02 root maldet(13054): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 20 03:28:02 root maldet(13054): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 20 03:28:03 root maldet(13054): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 20 03:28:03 root maldet(13054): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 20 03:28:03 root maldet(13054): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 20 03:28:03 root maldet(13054): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 20 03:28:03 root maldet(13054): {sigup} verified md5sum of maldet-sigpack.tgz May 20 03:28:03 root maldet(13054): {sigup} unpacked and installed maldet-sigpack.tgz May 20 03:28:03 root maldet(13054): {sigup} verified md5sum of maldet-clean.tgz May 20 03:28:03 root maldet(13054): {sigup} unpacked and installed maldet-clean.tgz May 20 03:28:03 root maldet(13054): {sigup} signature set update completed May 20 03:28:03 root maldet(13054): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 20 03:28:04 root maldet(13296): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 20 03:28:04 root maldet(13296): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 20 03:28:04 root maldet(13296): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 20 03:28:04 root maldet(13296): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 20 03:28:04 root maldet(13296): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 20 03:28:09 root maldet(13296): {scan} file list completed in 5s, found 41427 files... May 20 03:28:09 root maldet(13296): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 20 03:28:09 root maldet(13296): {scan} scan of (41427 files) in progress... May 20 03:29:16 root maldet(13296): {scan} scan completed on : files 41427, malware hits 0, cleaned hits 0, time 72s May 20 03:29:16 root maldet(13296): {scan} scan report saved, to view run: maldet --report 220520-0328.13296 May 21 03:27:25 root maldet(15379): {update} checking for available updates... May 21 03:27:26 root maldet(15379): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 21 03:27:26 root maldet(15379): {update} hashing install files and checking against server... May 21 03:27:26 root maldet(15379): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 21 03:27:26 root maldet(15379): {update} latest version already installed. May 21 03:27:26 root maldet(15518): {sigup} performing signature update check... May 21 03:27:26 root maldet(15518): {sigup} local signature set is version 202205192660337 May 21 03:27:27 root maldet(15518): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 21 03:27:27 root maldet(15518): {sigup} latest signature set already installed May 21 03:27:27 root maldet(15631): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 21 03:27:27 root maldet(15631): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 21 03:27:27 root maldet(15631): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 21 03:27:27 root maldet(15631): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 21 03:27:27 root maldet(15631): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 21 03:27:32 root maldet(15631): {scan} file list completed in 5s, found 80 files... May 21 03:27:32 root maldet(15631): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 21 03:27:32 root maldet(15631): {scan} scan of (80 files) in progress... May 21 03:27:39 root maldet(15631): {scan} scan completed on : files 80, malware hits 0, cleaned hits 0, time 12s May 21 03:27:39 root maldet(15631): {scan} scan report saved, to view run: maldet --report 220521-0327.15631 May 22 03:50:31 root maldet(3850): {update} checking for available updates... May 22 03:50:31 root maldet(3850): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 22 03:50:31 root maldet(3850): {update} hashing install files and checking against server... May 22 03:50:32 root maldet(3850): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 22 03:50:32 root maldet(3850): {update} latest version already installed. May 22 03:50:32 root maldet(4025): {sigup} performing signature update check... May 22 03:50:32 root maldet(4025): {sigup} local signature set is version 202205192660337 May 22 03:50:32 root maldet(4025): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 22 03:50:33 root maldet(4025): {sigup} latest signature set already installed May 22 03:50:33 root maldet(4137): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 22 03:50:36 root maldet(4137): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 22 03:50:36 root maldet(4137): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 22 03:50:36 root maldet(4137): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 22 03:50:36 root maldet(4137): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 22 04:15:31 root maldet(4137): {scan} file list completed in 1495s, found 20888 files... May 22 04:15:31 root maldet(4137): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 22 04:15:31 root maldet(4137): {scan} scan of (20888 files) in progress... May 22 04:19:52 root maldet(4137): {scan} scan completed on : files 20888, malware hits 0, cleaned hits 0, time 1758s May 22 04:19:52 root maldet(4137): {scan} scan report saved, to view run: maldet --report 220522-0350.4137 May 23 03:17:13 root maldet(18899): {update} checking for available updates... May 23 03:17:14 root maldet(18899): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 23 03:17:14 root maldet(18899): {update} hashing install files and checking against server... May 23 03:17:14 root maldet(18899): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 23 03:17:14 root maldet(18899): {update} latest version already installed. May 23 03:17:14 root maldet(19047): {sigup} performing signature update check... May 23 03:17:14 root maldet(19047): {sigup} local signature set is version 202205192660337 May 23 03:17:15 root maldet(19047): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 23 03:17:15 root maldet(19047): {sigup} new signature set 202205223392005 available May 23 03:17:15 root maldet(19047): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 23 03:17:15 root maldet(19047): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 23 03:17:15 root maldet(19047): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 23 03:17:15 root maldet(19047): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 23 03:17:16 root maldet(19047): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 23 03:17:16 root maldet(19047): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 23 03:17:16 root maldet(19047): {sigup} verified md5sum of maldet-sigpack.tgz May 23 03:17:16 root maldet(19047): {sigup} unpacked and installed maldet-sigpack.tgz May 23 03:17:16 root maldet(19047): {sigup} verified md5sum of maldet-clean.tgz May 23 03:17:16 root maldet(19047): {sigup} unpacked and installed maldet-clean.tgz May 23 03:17:16 root maldet(19047): {sigup} signature set update completed May 23 03:17:16 root maldet(19047): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 23 03:17:17 root maldet(19293): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 23 03:17:17 root maldet(19293): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 23 03:17:17 root maldet(19293): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 23 03:17:17 root maldet(19293): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 23 03:17:17 root maldet(19293): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 23 03:17:23 root maldet(19293): {scan} file list completed in 6s, found 6958 files... May 23 03:17:23 root maldet(19293): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 23 03:17:23 root maldet(19293): {scan} scan of (6958 files) in progress... May 23 03:19:26 root maldet(19293): {scan} scan completed on : files 6958, malware hits 0, cleaned hits 0, time 129s May 23 03:19:26 root maldet(19293): {scan} scan report saved, to view run: maldet --report 220523-0317.19293 May 24 03:25:50 root maldet(4806): {update} checking for available updates... May 24 03:25:51 root maldet(4806): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 24 03:25:51 root maldet(4806): {update} hashing install files and checking against server... May 24 03:25:51 root maldet(4806): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 24 03:25:51 root maldet(4806): {update} latest version already installed. May 24 03:25:51 root maldet(4943): {sigup} performing signature update check... May 24 03:25:51 root maldet(4943): {sigup} local signature set is version 202205223392005 May 24 03:25:52 root maldet(4943): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 24 03:25:52 root maldet(4943): {sigup} latest signature set already installed May 24 03:25:52 root maldet(5055): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 24 03:25:52 root maldet(5055): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 24 03:25:52 root maldet(5055): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 24 03:25:52 root maldet(5055): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 24 03:25:52 root maldet(5055): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 24 03:25:57 root maldet(5055): {scan} file list completed in 5s, found 433 files... May 24 03:25:57 root maldet(5055): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 24 03:25:57 root maldet(5055): {scan} scan of (433 files) in progress... May 24 03:26:08 root maldet(5055): {scan} scan completed on : files 433, malware hits 0, cleaned hits 0, time 16s May 24 03:26:08 root maldet(5055): {scan} scan report saved, to view run: maldet --report 220524-0325.5055 May 25 03:19:16 root maldet(16483): {update} checking for available updates... May 25 03:19:16 root maldet(16483): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 25 03:19:16 root maldet(16483): {update} hashing install files and checking against server... May 25 03:19:16 root maldet(16483): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 25 03:19:16 root maldet(16483): {update} latest version already installed. May 25 03:19:16 root maldet(16654): {sigup} performing signature update check... May 25 03:19:16 root maldet(16654): {sigup} local signature set is version 202205223392005 May 25 03:19:17 root maldet(16654): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 25 03:19:17 root maldet(16654): {sigup} latest signature set already installed May 25 03:19:17 root maldet(16811): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 25 03:19:20 root maldet(16811): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 25 03:19:20 root maldet(16811): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 25 03:19:20 root maldet(16811): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 25 03:19:20 root maldet(16811): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 25 03:29:29 root maldet(16811): {scan} file list completed in 609s, found 187 files... May 25 03:29:29 root maldet(16811): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 25 03:29:29 root maldet(16811): {scan} scan of (187 files) in progress... May 25 03:30:11 root maldet(16811): {scan} scan completed on : files 187, malware hits 0, cleaned hits 0, time 654s May 25 03:30:11 root maldet(16811): {scan} scan report saved, to view run: maldet --report 220525-0319.16811 May 26 03:25:12 root maldet(29880): {update} checking for available updates... May 26 03:25:13 root maldet(29880): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 26 03:25:13 root maldet(29880): {update} hashing install files and checking against server... May 26 03:25:13 root maldet(29880): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 26 03:25:13 root maldet(29880): {update} latest version already installed. May 26 03:25:13 root maldet(30013): {sigup} performing signature update check... May 26 03:25:13 root maldet(30013): {sigup} local signature set is version 202205223392005 May 26 03:25:14 root maldet(30013): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 26 03:25:14 root maldet(30013): {sigup} new signature set 202205254118134 available May 26 03:25:14 root maldet(30013): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 26 03:25:14 root maldet(30013): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 26 03:25:15 root maldet(30013): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 26 03:25:15 root maldet(30013): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 26 03:25:15 root maldet(30013): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 26 03:25:15 root maldet(30013): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 26 03:25:15 root maldet(30013): {sigup} verified md5sum of maldet-sigpack.tgz May 26 03:25:16 root maldet(30013): {sigup} unpacked and installed maldet-sigpack.tgz May 26 03:25:16 root maldet(30013): {sigup} verified md5sum of maldet-clean.tgz May 26 03:25:16 root maldet(30013): {sigup} unpacked and installed maldet-clean.tgz May 26 03:25:16 root maldet(30013): {sigup} signature set update completed May 26 03:25:16 root maldet(30013): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 26 03:25:16 root maldet(30254): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 26 03:25:16 root maldet(30254): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 26 03:25:16 root maldet(30254): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 26 03:25:16 root maldet(30254): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 26 03:25:16 root maldet(30254): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 26 03:25:22 root maldet(30254): {scan} file list completed in 6s, found 1270 files... May 26 03:25:23 root maldet(30254): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 26 03:25:23 root maldet(30254): {scan} scan of (1270 files) in progress... May 26 03:26:34 root maldet(30254): {scan} scan completed on : files 1270, malware hits 0, cleaned hits 0, time 78s May 26 03:26:34 root maldet(30254): {scan} scan report saved, to view run: maldet --report 220526-0325.30254 May 27 03:30:39 root maldet(23886): {update} checking for available updates... May 27 03:30:40 root maldet(23886): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 27 03:30:40 root maldet(23886): {update} hashing install files and checking against server... May 27 03:30:41 root maldet(23886): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 27 03:30:41 root maldet(23886): {update} latest version already installed. May 27 03:30:41 root maldet(24022): {sigup} performing signature update check... May 27 03:30:41 root maldet(24022): {sigup} local signature set is version 202205254118134 May 27 03:30:41 root maldet(24022): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 27 03:30:41 root maldet(24022): {sigup} latest signature set already installed May 27 03:30:41 root maldet(24141): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 27 03:30:42 root maldet(24141): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 27 03:30:42 root maldet(24141): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 27 03:30:42 root maldet(24141): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 27 03:30:42 root maldet(24141): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 27 03:30:47 root maldet(24141): {scan} file list completed in 5s, found 748 files... May 27 03:30:47 root maldet(24141): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 27 03:30:47 root maldet(24141): {scan} scan of (748 files) in progress... May 27 03:31:19 root maldet(24141): {scan} scan completed on : files 748, malware hits 0, cleaned hits 0, time 37s May 27 03:31:19 root maldet(24141): {scan} scan report saved, to view run: maldet --report 220527-0330.24141 May 28 03:37:01 root maldet(5067): {update} checking for available updates... May 28 03:37:02 root maldet(5067): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 28 03:37:02 root maldet(5067): {update} hashing install files and checking against server... May 28 03:37:02 root maldet(5067): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 28 03:37:02 root maldet(5067): {update} latest version already installed. May 28 03:37:02 root maldet(5206): {sigup} performing signature update check... May 28 03:37:02 root maldet(5206): {sigup} local signature set is version 202205254118134 May 28 03:37:03 root maldet(5206): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 28 03:37:03 root maldet(5206): {sigup} latest signature set already installed May 28 03:37:03 root maldet(5323): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 28 03:37:03 root maldet(5323): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 28 03:37:03 root maldet(5323): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 28 03:37:03 root maldet(5323): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 28 03:37:03 root maldet(5323): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 28 03:37:08 root maldet(5323): {scan} file list completed in 5s, found 145 files... May 28 03:37:08 root maldet(5323): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 28 03:37:08 root maldet(5323): {scan} scan of (145 files) in progress... May 28 03:37:17 root maldet(5323): {scan} scan completed on : files 145, malware hits 0, cleaned hits 0, time 14s May 28 03:37:17 root maldet(5323): {scan} scan report saved, to view run: maldet --report 220528-0337.5323 May 29 03:55:57 root maldet(29402): {update} checking for available updates... May 29 03:55:58 root maldet(29402): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 29 03:55:58 root maldet(29402): {update} hashing install files and checking against server... May 29 03:55:59 root maldet(29402): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 29 03:55:59 root maldet(29402): {update} latest version already installed. May 29 03:55:59 root maldet(29540): {sigup} performing signature update check... May 29 03:55:59 root maldet(29540): {sigup} local signature set is version 202205254118134 May 29 03:55:59 root maldet(29540): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 29 03:56:00 root maldet(29540): {sigup} latest signature set already installed May 29 03:56:00 root maldet(29694): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 29 03:56:02 root maldet(29694): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 29 03:56:02 root maldet(29694): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 29 03:56:02 root maldet(29694): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 29 03:56:02 root maldet(29694): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 29 04:14:54 root maldet(29694): {scan} file list completed in 1132s, found 112141 files... May 29 04:14:54 root maldet(29694): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 29 04:14:54 root maldet(29694): {scan} scan of (112141 files) in progress... May 29 04:35:08 root maldet(29694): {scan} scan completed on : files 112141, malware hits 0, cleaned hits 0, time 2348s May 29 04:35:08 root maldet(29694): {scan} scan report saved, to view run: maldet --report 220529-0356.29694 May 30 03:16:59 root maldet(9639): {update} checking for available updates... May 30 03:16:59 root maldet(9639): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 30 03:16:59 root maldet(9639): {update} hashing install files and checking against server... May 30 03:17:00 root maldet(9639): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 30 03:17:00 root maldet(9639): {update} latest version already installed. May 30 03:17:00 root maldet(9776): {sigup} performing signature update check... May 30 03:17:00 root maldet(9776): {sigup} local signature set is version 202205254118134 May 30 03:17:00 root maldet(9776): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 30 03:17:00 root maldet(9776): {sigup} latest signature set already installed May 30 03:17:00 root maldet(9887): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 30 03:17:01 root maldet(9887): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 30 03:17:01 root maldet(9887): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 30 03:17:01 root maldet(9887): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 30 03:17:01 root maldet(9887): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 30 03:17:09 root maldet(9887): {scan} file list completed in 8s, found 85 files... May 30 03:17:09 root maldet(9887): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 30 03:17:09 root maldet(9887): {scan} scan of (85 files) in progress... May 30 03:17:17 root maldet(9887): {scan} scan completed on : files 85, malware hits 0, cleaned hits 0, time 17s May 30 03:17:17 root maldet(9887): {scan} scan report saved, to view run: maldet --report 220530-0317.9887 May 31 03:32:10 root maldet(17897): {update} checking for available updates... May 31 03:32:10 root maldet(17897): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 31 03:32:11 root maldet(17897): {update} hashing install files and checking against server... May 31 03:32:11 root maldet(17897): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 31 03:32:11 root maldet(17897): {update} latest version already installed. May 31 03:32:11 root maldet(18033): {sigup} performing signature update check... May 31 03:32:11 root maldet(18033): {sigup} local signature set is version 202205254118134 May 31 03:32:11 root maldet(18033): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 31 03:32:11 root maldet(18033): {sigup} latest signature set already installed May 31 03:32:12 root maldet(18148): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 31 03:32:12 root maldet(18148): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) May 31 03:32:12 root maldet(18148): {scan} building file list for of new/modified files from last 1 days, this might take awhile... May 31 03:32:12 root maldet(18148): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 31 03:32:12 root maldet(18148): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 31 03:32:18 root maldet(18148): {scan} file list completed in 6s, found 140 files... May 31 03:32:18 root maldet(18148): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 31 03:32:18 root maldet(18148): {scan} scan of (140 files) in progress... May 31 03:32:26 root maldet(18148): {hit} malware hit {YARA}php_in_image found for /home/bpainsolvency/public_html/admin/imagetemp/bys.jpg May 31 03:32:26 root maldet(18148): {quar} malware quarantined from '/home/bpainsolvency/public_html/admin/imagetemp/bys.jpg' to '/usr/local/maldetect/quarantine/bys.jpg.2842126773' May 31 03:32:26 root maldet(18148): {hit} malware hit {YARA}php_in_image found for /home/bpainsolvency/public_html/admin/imagetemp/bys(1).jpg May 31 03:32:26 root maldet(18148): {quar} malware quarantined from '/home/bpainsolvency/public_html/admin/imagetemp/bys(1).jpg' to '/usr/local/maldetect/quarantine/bys(1).jpg.1910429190' May 31 03:32:26 root maldet(18148): {hit} malware hit {YARA}php_in_image found for /home/bpainsolvency/public_html/masterbhuvi1/page/220530050035_PAGE.jpg May 31 03:32:26 root maldet(18148): {quar} malware quarantined from '/home/bpainsolvency/public_html/masterbhuvi1/page/220530050035_PAGE.jpg' to '/usr/local/maldetect/quarantine/220530050035_PAGE.jpg.813814268' May 31 03:32:26 root maldet(18148): {scan} scan completed on : files 140, malware hits 3, cleaned hits 0, time 14s May 31 03:32:26 root maldet(18148): {scan} scan report saved, to view run: maldet --report 220531-0332.18148 Jun 01 03:31:52 root maldet(9798): {update} checking for available updates... Jun 01 03:31:53 root maldet(9798): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 01 03:31:53 root maldet(9798): {update} hashing install files and checking against server... Jun 01 03:31:53 root maldet(9798): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 01 03:31:53 root maldet(9798): {update} latest version already installed. Jun 01 03:31:53 root maldet(9941): {sigup} performing signature update check... Jun 01 03:31:53 root maldet(9941): {sigup} local signature set is version 202205254118134 Jun 01 03:31:54 root maldet(9941): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 01 03:31:54 root maldet(9941): {sigup} new signature set 20220531521320 available Jun 01 03:31:54 root maldet(9941): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 01 03:31:54 root maldet(9941): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 01 03:31:55 root maldet(9941): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 01 03:31:55 root maldet(9941): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 01 03:31:55 root maldet(9941): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 01 03:31:55 root maldet(9941): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 01 03:31:55 root maldet(9941): {sigup} verified md5sum of maldet-sigpack.tgz Jun 01 03:31:56 root maldet(9941): {sigup} unpacked and installed maldet-sigpack.tgz Jun 01 03:31:56 root maldet(9941): {sigup} verified md5sum of maldet-clean.tgz Jun 01 03:31:56 root maldet(9941): {sigup} unpacked and installed maldet-clean.tgz Jun 01 03:31:56 root maldet(9941): {sigup} signature set update completed Jun 01 03:31:56 root maldet(9941): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 01 03:31:56 root maldet(10195): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 01 03:31:57 root maldet(10195): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 01 03:31:57 root maldet(10195): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 01 03:31:57 root maldet(10195): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 01 03:31:57 root maldet(10195): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 01 03:52:12 root maldet(10195): {scan} file list completed in 1215s, found 85197 files... Jun 01 03:52:12 root maldet(10195): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 01 03:52:12 root maldet(10195): {scan} scan of (85197 files) in progress... Jun 01 04:03:38 root maldet(10195): {scan} scan completed on : files 85197, malware hits 0, cleaned hits 0, time 1902s Jun 01 04:03:38 root maldet(10195): {scan} scan report saved, to view run: maldet --report 220601-0331.10195 Jun 02 03:50:00 root maldet(32094): {update} checking for available updates... Jun 02 03:50:00 root maldet(32094): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 02 03:50:00 root maldet(32094): {update} hashing install files and checking against server... Jun 02 03:50:01 root maldet(32094): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 02 03:50:01 root maldet(32094): {update} latest version already installed. Jun 02 03:50:01 root maldet(32234): {sigup} performing signature update check... Jun 02 03:50:01 root maldet(32234): {sigup} local signature set is version 20220531521320 Jun 02 03:50:01 root maldet(32234): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 02 03:50:01 root maldet(32234): {sigup} new signature set 202206011153550 available Jun 02 03:50:01 root maldet(32234): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 02 03:50:02 root maldet(32234): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 02 03:50:02 root maldet(32234): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 02 03:50:02 root maldet(32234): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 02 03:50:02 root maldet(32234): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 02 03:50:03 root maldet(32234): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 02 03:50:03 root maldet(32234): {sigup} verified md5sum of maldet-sigpack.tgz Jun 02 03:50:03 root maldet(32234): {sigup} unpacked and installed maldet-sigpack.tgz Jun 02 03:50:03 root maldet(32234): {sigup} verified md5sum of maldet-clean.tgz Jun 02 03:50:03 root maldet(32234): {sigup} unpacked and installed maldet-clean.tgz Jun 02 03:50:03 root maldet(32234): {sigup} signature set update completed Jun 02 03:50:03 root maldet(32234): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 02 03:50:03 root maldet(489): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 02 03:50:04 root maldet(489): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 02 03:50:04 root maldet(489): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 02 03:50:04 root maldet(489): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 02 03:50:04 root maldet(489): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 02 03:50:11 root maldet(489): {scan} file list completed in 7s, found 196 files... Jun 02 03:50:11 root maldet(489): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 02 03:50:11 root maldet(489): {scan} scan of (196 files) in progress... Jun 02 03:51:15 root maldet(489): {scan} scan completed on : files 196, malware hits 0, cleaned hits 0, time 72s Jun 02 03:51:15 root maldet(489): {scan} scan report saved, to view run: maldet --report 220602-0350.489 Jun 03 04:01:31 root maldet(3798): {update} checking for available updates... Jun 03 04:01:32 root maldet(3798): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 03 04:01:32 root maldet(3798): {update} hashing install files and checking against server... Jun 03 04:01:32 root maldet(3798): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 03 04:01:32 root maldet(3798): {update} latest version already installed. Jun 03 04:01:32 root maldet(3935): {sigup} performing signature update check... Jun 03 04:01:32 root maldet(3935): {sigup} local signature set is version 202206011153550 Jun 03 04:01:33 root maldet(3935): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 03 04:01:33 root maldet(3935): {sigup} latest signature set already installed Jun 03 04:01:33 root maldet(4047): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 03 04:01:33 root maldet(4047): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 03 04:01:33 root maldet(4047): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 03 04:01:33 root maldet(4047): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 03 04:01:33 root maldet(4047): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 03 04:01:39 root maldet(4047): {scan} file list completed in 6s, found 27638 files... Jun 03 04:01:39 root maldet(4047): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 03 04:01:39 root maldet(4047): {scan} scan of (27638 files) in progress... Jun 03 04:02:16 root maldet(4047): {scan} scan completed on : files 27638, malware hits 0, cleaned hits 0, time 43s Jun 03 04:02:16 root maldet(4047): {scan} scan report saved, to view run: maldet --report 220603-0401.4047 Jun 04 03:41:21 root maldet(27209): {update} checking for available updates... Jun 04 03:41:22 root maldet(27209): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 04 03:41:22 root maldet(27209): {update} hashing install files and checking against server... Jun 04 03:41:22 root maldet(27209): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 04 03:41:22 root maldet(27209): {update} latest version already installed. Jun 04 03:41:22 root maldet(27347): {sigup} performing signature update check... Jun 04 03:41:22 root maldet(27347): {sigup} local signature set is version 202206011153550 Jun 04 03:41:23 root maldet(27347): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 04 03:41:23 root maldet(27347): {sigup} latest signature set already installed Jun 04 03:41:23 root maldet(27465): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 04 03:41:23 root maldet(27465): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 04 03:41:23 root maldet(27465): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 04 03:41:23 root maldet(27465): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 04 03:41:23 root maldet(27465): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 04 03:41:29 root maldet(27465): {scan} file list completed in 6s, found 244 files... Jun 04 03:41:29 root maldet(27465): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 04 03:41:29 root maldet(27465): {scan} scan of (244 files) in progress... Jun 04 03:41:41 root maldet(27465): {scan} scan completed on : files 244, malware hits 0, cleaned hits 0, time 18s Jun 04 03:41:41 root maldet(27465): {scan} scan report saved, to view run: maldet --report 220604-0341.27465 Jun 05 03:50:52 root maldet(12102): {update} checking for available updates... Jun 05 03:50:52 root maldet(12102): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 05 03:50:52 root maldet(12102): {update} hashing install files and checking against server... Jun 05 03:50:52 root maldet(12102): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 05 03:50:52 root maldet(12102): {update} latest version already installed. Jun 05 03:50:52 root maldet(12247): {sigup} performing signature update check... Jun 05 03:50:53 root maldet(12247): {sigup} local signature set is version 202206011153550 Jun 05 03:50:53 root maldet(12247): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 05 03:50:53 root maldet(12247): {sigup} new signature set 202206041831709 available Jun 05 03:50:53 root maldet(12247): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 05 03:50:54 root maldet(12247): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 05 03:50:54 root maldet(12247): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 05 03:50:54 root maldet(12247): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 05 03:50:54 root maldet(12247): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 05 03:50:55 root maldet(12247): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 05 03:50:55 root maldet(12247): {sigup} verified md5sum of maldet-sigpack.tgz Jun 05 03:50:56 root maldet(12247): {sigup} unpacked and installed maldet-sigpack.tgz Jun 05 03:50:56 root maldet(12247): {sigup} verified md5sum of maldet-clean.tgz Jun 05 03:50:56 root maldet(12247): {sigup} unpacked and installed maldet-clean.tgz Jun 05 03:50:56 root maldet(12247): {sigup} signature set update completed Jun 05 03:50:56 root maldet(12247): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 05 03:50:56 root maldet(12501): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 05 03:50:57 root maldet(12501): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 05 03:50:57 root maldet(12501): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 05 03:50:57 root maldet(12501): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 05 03:50:57 root maldet(12501): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 05 04:19:56 root maldet(12501): {scan} file list completed in 1739s, found 165583 files... Jun 05 04:19:56 root maldet(12501): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 05 04:19:56 root maldet(12501): {scan} scan of (165583 files) in progress... Jun 05 04:45:21 root maldet(12501): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Jun 05 04:45:21 root maldet(12501): {scan} scan completed on : files 165583, malware hits 0, cleaned hits 0, time 3265s Jun 05 04:45:21 root maldet(12501): {scan} scan report saved, to view run: maldet --report 220605-0350.12501 Jun 06 03:45:43 root maldet(16580): {update} checking for available updates... Jun 06 03:45:44 root maldet(16580): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 06 03:45:44 root maldet(16580): {update} hashing install files and checking against server... Jun 06 03:45:44 root maldet(16580): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 06 03:45:44 root maldet(16580): {update} latest version already installed. Jun 06 03:45:44 root maldet(16719): {sigup} performing signature update check... Jun 06 03:45:44 root maldet(16719): {sigup} local signature set is version 202206041831709 Jun 06 03:45:45 root maldet(16719): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 06 03:45:45 root maldet(16719): {sigup} latest signature set already installed Jun 06 03:45:45 root maldet(16834): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 06 03:45:46 root maldet(16834): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 06 03:45:46 root maldet(16834): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 06 03:45:46 root maldet(16834): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 06 03:45:46 root maldet(16834): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 06 03:45:55 root maldet(16834): {scan} file list completed in 9s, found 135 files... Jun 06 03:45:55 root maldet(16834): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 06 03:45:55 root maldet(16834): {scan} scan of (135 files) in progress... Jun 06 03:46:13 root maldet(16834): {scan} scan completed on : files 135, malware hits 0, cleaned hits 0, time 28s Jun 06 03:46:13 root maldet(16834): {scan} scan report saved, to view run: maldet --report 220606-0345.16834 Jun 07 03:24:51 root maldet(28382): {update} checking for available updates... Jun 07 03:24:52 root maldet(28382): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 07 03:24:52 root maldet(28382): {update} hashing install files and checking against server... Jun 07 03:24:52 root maldet(28382): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 07 03:24:52 root maldet(28382): {update} latest version already installed. Jun 07 03:24:52 root maldet(28523): {sigup} performing signature update check... Jun 07 03:24:52 root maldet(28523): {sigup} local signature set is version 202206041831709 Jun 07 03:24:53 root maldet(28523): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 07 03:24:53 root maldet(28523): {sigup} latest signature set already installed Jun 07 03:24:53 root maldet(28641): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 07 03:24:53 root maldet(28641): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 07 03:24:53 root maldet(28641): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 07 03:24:53 root maldet(28641): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 07 03:24:53 root maldet(28641): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 07 03:25:00 root maldet(28641): {scan} file list completed in 7s, found 93 files... Jun 07 03:25:00 root maldet(28641): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 07 03:25:00 root maldet(28641): {scan} scan of (93 files) in progress... Jun 07 03:25:06 root maldet(28641): {scan} scan completed on : files 93, malware hits 0, cleaned hits 0, time 13s Jun 07 03:25:06 root maldet(28641): {scan} scan report saved, to view run: maldet --report 220607-0324.28641 Jun 08 03:29:05 root maldet(26691): {update} checking for available updates... Jun 08 03:29:06 root maldet(26691): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 08 03:29:06 root maldet(26691): {update} hashing install files and checking against server... Jun 08 03:29:06 root maldet(26691): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 08 03:29:06 root maldet(26691): {update} latest version already installed. Jun 08 03:29:06 root maldet(26840): {sigup} performing signature update check... Jun 08 03:29:06 root maldet(26840): {sigup} local signature set is version 202206041831709 Jun 08 03:29:06 root maldet(26840): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 08 03:29:07 root maldet(26840): {sigup} new signature set 202206072506508 available Jun 08 03:29:07 root maldet(26840): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 08 03:29:07 root maldet(26840): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 08 03:29:07 root maldet(26840): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 08 03:29:07 root maldet(26840): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 08 03:29:08 root maldet(26840): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 08 03:29:08 root maldet(26840): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 08 03:29:08 root maldet(26840): {sigup} verified md5sum of maldet-sigpack.tgz Jun 08 03:29:09 root maldet(26840): {sigup} unpacked and installed maldet-sigpack.tgz Jun 08 03:29:09 root maldet(26840): {sigup} verified md5sum of maldet-clean.tgz Jun 08 03:29:09 root maldet(26840): {sigup} unpacked and installed maldet-clean.tgz Jun 08 03:29:09 root maldet(26840): {sigup} signature set update completed Jun 08 03:29:09 root maldet(26840): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 08 03:29:09 root maldet(27096): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 08 03:29:10 root maldet(27096): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 08 03:29:10 root maldet(27096): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 08 03:29:10 root maldet(27096): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 08 03:29:10 root maldet(27096): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 08 03:59:43 root maldet(27096): {scan} file list completed in 1833s, found 33702 files... Jun 08 03:59:43 root maldet(27096): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 08 03:59:43 root maldet(27096): {scan} scan of (33702 files) in progress... Jun 08 04:08:13 root maldet(27096): {scan} scan completed on : files 33702, malware hits 0, cleaned hits 0, time 2344s Jun 08 04:08:13 root maldet(27096): {scan} scan report saved, to view run: maldet --report 220608-0329.27096 Jun 09 03:33:50 root maldet(24146): {update} checking for available updates... Jun 09 03:33:50 root maldet(24146): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 09 03:33:50 root maldet(24146): {update} hashing install files and checking against server... Jun 09 03:33:51 root maldet(24146): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 09 03:33:51 root maldet(24146): {update} latest version already installed. Jun 09 03:33:51 root maldet(24291): {sigup} performing signature update check... Jun 09 03:33:51 root maldet(24291): {sigup} local signature set is version 202206072506508 Jun 09 03:33:51 root maldet(24291): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 09 03:33:51 root maldet(24291): {sigup} latest signature set already installed Jun 09 03:33:51 root maldet(24403): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 09 03:33:52 root maldet(24403): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 09 03:33:52 root maldet(24403): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 09 03:33:52 root maldet(24403): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 09 03:33:52 root maldet(24403): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 09 03:33:59 root maldet(24403): {scan} file list completed in 7s, found 101 files... Jun 09 03:33:59 root maldet(24403): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 09 03:33:59 root maldet(24403): {scan} scan of (101 files) in progress... Jun 09 03:34:06 root maldet(24403): {scan} scan completed on : files 101, malware hits 0, cleaned hits 0, time 15s Jun 09 03:34:06 root maldet(24403): {scan} scan report saved, to view run: maldet --report 220609-0333.24403 Jun 10 03:22:10 root maldet(31151): {update} checking for available updates... Jun 10 03:22:10 root maldet(31151): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 10 03:22:10 root maldet(31151): {update} hashing install files and checking against server... Jun 10 03:22:11 root maldet(31151): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 10 03:22:11 root maldet(31151): {update} latest version already installed. Jun 10 03:22:11 root maldet(31291): {sigup} performing signature update check... Jun 10 03:22:11 root maldet(31291): {sigup} local signature set is version 202206072506508 Jun 10 03:22:11 root maldet(31291): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 10 03:22:11 root maldet(31291): {sigup} latest signature set already installed Jun 10 03:22:11 root maldet(31433): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 10 03:22:11 root maldet(31433): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 10 03:22:11 root maldet(31433): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 10 03:22:11 root maldet(31433): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 10 03:22:11 root maldet(31433): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 10 03:22:19 root maldet(31433): {scan} file list completed in 7s, found 86 files... Jun 10 03:22:19 root maldet(31433): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 10 03:22:19 root maldet(31433): {scan} scan of (86 files) in progress... Jun 10 03:22:23 root maldet(31433): {scan} scan completed on : files 86, malware hits 0, cleaned hits 0, time 12s Jun 10 03:22:23 root maldet(31433): {scan} scan report saved, to view run: maldet --report 220610-0322.31433 Jun 11 03:33:22 root maldet(16787): {update} checking for available updates... Jun 11 03:33:23 root maldet(16787): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 11 03:33:23 root maldet(16787): {update} hashing install files and checking against server... Jun 11 03:33:23 root maldet(16787): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 11 03:33:23 root maldet(16787): {update} latest version already installed. Jun 11 03:33:23 root maldet(16927): {sigup} performing signature update check... Jun 11 03:33:23 root maldet(16927): {sigup} local signature set is version 202206072506508 Jun 11 03:33:24 root maldet(16927): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 11 03:33:24 root maldet(16927): {sigup} new signature set 202206103181749 available Jun 11 03:33:24 root maldet(16927): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 11 03:33:24 root maldet(16927): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 11 03:33:25 root maldet(16927): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 11 03:33:25 root maldet(16927): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 11 03:33:25 root maldet(16927): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 11 03:33:25 root maldet(16927): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 11 03:33:25 root maldet(16927): {sigup} verified md5sum of maldet-sigpack.tgz Jun 11 03:33:27 root maldet(16927): {sigup} unpacked and installed maldet-sigpack.tgz Jun 11 03:33:27 root maldet(16927): {sigup} verified md5sum of maldet-clean.tgz Jun 11 03:33:27 root maldet(16927): {sigup} unpacked and installed maldet-clean.tgz Jun 11 03:33:27 root maldet(16927): {sigup} signature set update completed Jun 11 03:33:27 root maldet(16927): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 11 03:33:28 root maldet(17195): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 11 03:33:28 root maldet(17195): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 11 03:33:28 root maldet(17195): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 11 03:33:28 root maldet(17195): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 11 03:33:28 root maldet(17195): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 11 03:33:35 root maldet(17195): {scan} file list completed in 7s, found 123 files... Jun 11 03:33:35 root maldet(17195): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 11 03:33:35 root maldet(17195): {scan} scan of (123 files) in progress... Jun 11 03:33:44 root maldet(17195): {scan} scan completed on : files 123, malware hits 0, cleaned hits 0, time 16s Jun 11 03:33:44 root maldet(17195): {scan} scan report saved, to view run: maldet --report 220611-0333.17195 Jun 12 03:23:06 root maldet(18283): {update} checking for available updates... Jun 12 03:23:06 root maldet(18283): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 12 03:23:06 root maldet(18283): {update} hashing install files and checking against server... Jun 12 03:23:06 root maldet(18283): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 12 03:23:06 root maldet(18283): {update} latest version already installed. Jun 12 03:23:07 root maldet(18432): {sigup} performing signature update check... Jun 12 03:23:07 root maldet(18432): {sigup} local signature set is version 202206103181749 Jun 12 03:23:07 root maldet(18432): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 12 03:23:08 root maldet(18432): {sigup} latest signature set already installed Jun 12 03:23:08 root maldet(18546): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 12 03:23:09 root maldet(18546): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 12 03:23:09 root maldet(18546): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 12 03:23:09 root maldet(18546): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 12 03:23:09 root maldet(18546): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 12 03:53:04 root maldet(18546): {scan} file list completed in 1794s, found 27650 files... Jun 12 03:53:04 root maldet(18546): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 12 03:53:04 root maldet(18546): {scan} scan of (27650 files) in progress... Jun 12 03:55:55 root maldet(18546): {scan} scan completed on : files 27650, malware hits 0, cleaned hits 0, time 1967s Jun 12 03:55:55 root maldet(18546): {scan} scan report saved, to view run: maldet --report 220612-0323.18546 Jun 13 03:44:51 root maldet(1055): {update} checking for available updates... Jun 13 03:44:52 root maldet(1055): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 13 03:44:52 root maldet(1055): {update} hashing install files and checking against server... Jun 13 03:44:52 root maldet(1055): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 13 03:44:52 root maldet(1055): {update} latest version already installed. Jun 13 03:44:52 root maldet(1190): {sigup} performing signature update check... Jun 13 03:44:52 root maldet(1190): {sigup} local signature set is version 202206103181749 Jun 13 03:44:53 root maldet(1190): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 13 03:44:53 root maldet(1190): {sigup} latest signature set already installed Jun 13 03:44:53 root maldet(1302): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 13 03:44:54 root maldet(1302): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 13 03:44:54 root maldet(1302): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 13 03:44:54 root maldet(1302): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 13 03:44:54 root maldet(1302): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 13 03:45:01 root maldet(1302): {scan} file list completed in 7s, found 111987 files... Jun 13 03:45:01 root maldet(1302): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 13 03:45:01 root maldet(1302): {scan} scan of (111987 files) in progress... Jun 13 03:52:15 root maldet(1302): {scan} scan completed on : files 111987, malware hits 0, cleaned hits 0, time 442s Jun 13 03:52:15 root maldet(1302): {scan} scan report saved, to view run: maldet --report 220613-0344.1302 Jun 14 03:50:38 root maldet(19864): {update} checking for available updates... Jun 14 03:50:38 root maldet(19864): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 14 03:50:38 root maldet(19864): {update} hashing install files and checking against server... Jun 14 03:50:38 root maldet(19864): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 14 03:50:38 root maldet(19864): {update} latest version already installed. Jun 14 03:50:39 root maldet(20001): {sigup} performing signature update check... Jun 14 03:50:39 root maldet(20001): {sigup} local signature set is version 202206103181749 Jun 14 03:50:39 root maldet(20001): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 14 03:50:39 root maldet(20001): {sigup} new signature set 202206133856730 available Jun 14 03:50:39 root maldet(20001): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 14 03:50:40 root maldet(20001): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 14 03:50:40 root maldet(20001): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 14 03:50:40 root maldet(20001): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 14 03:50:40 root maldet(20001): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 14 03:50:41 root maldet(20001): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 14 03:50:41 root maldet(20001): {sigup} verified md5sum of maldet-sigpack.tgz Jun 14 03:50:43 root maldet(20001): {sigup} unpacked and installed maldet-sigpack.tgz Jun 14 03:50:43 root maldet(20001): {sigup} verified md5sum of maldet-clean.tgz Jun 14 03:50:43 root maldet(20001): {sigup} unpacked and installed maldet-clean.tgz Jun 14 03:50:43 root maldet(20001): {sigup} signature set update completed Jun 14 03:50:43 root maldet(20001): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 14 03:50:43 root maldet(20247): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 14 03:50:43 root maldet(20247): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 14 03:50:43 root maldet(20247): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 14 03:50:43 root maldet(20247): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 14 03:50:43 root maldet(20247): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 14 03:50:50 root maldet(20247): {scan} file list completed in 7s, found 5754 files... Jun 14 03:50:50 root maldet(20247): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 14 03:50:50 root maldet(20247): {scan} scan of (5754 files) in progress... Jun 14 03:51:11 root maldet(20247): {scan} scan completed on : files 5754, malware hits 0, cleaned hits 0, time 28s Jun 14 03:51:11 root maldet(20247): {scan} scan report saved, to view run: maldet --report 220614-0350.20247 Jun 15 03:22:52 root maldet(18152): {update} checking for available updates... Jun 15 03:22:53 root maldet(18152): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 15 03:22:53 root maldet(18152): {update} hashing install files and checking against server... Jun 15 03:22:53 root maldet(18152): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 15 03:22:53 root maldet(18152): {update} latest version already installed. Jun 15 03:22:53 root maldet(18300): {sigup} performing signature update check... Jun 15 03:22:53 root maldet(18300): {sigup} local signature set is version 202206133856730 Jun 15 03:22:54 root maldet(18300): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 15 03:22:54 root maldet(18300): {sigup} latest signature set already installed Jun 15 03:22:54 root maldet(18411): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 15 03:22:56 root maldet(18411): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 15 03:22:56 root maldet(18411): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 15 03:22:56 root maldet(18411): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 15 03:22:56 root maldet(18411): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 15 03:40:29 root maldet(18411): {scan} file list completed in 1053s, found 3079 files... Jun 15 03:40:29 root maldet(18411): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 15 03:40:29 root maldet(18411): {scan} scan of (3079 files) in progress... Jun 15 03:41:44 root maldet(18411): {scan} scan completed on : files 3079, malware hits 0, cleaned hits 0, time 1130s Jun 15 03:41:44 root maldet(18411): {scan} scan report saved, to view run: maldet --report 220615-0322.18411 Jun 16 03:45:08 root maldet(5633): {update} checking for available updates... Jun 16 03:45:09 root maldet(5633): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 16 03:45:09 root maldet(5633): {update} hashing install files and checking against server... Jun 16 03:45:09 root maldet(5633): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 16 03:45:09 root maldet(5633): {update} latest version already installed. Jun 16 03:45:09 root maldet(5778): {sigup} performing signature update check... Jun 16 03:45:09 root maldet(5778): {sigup} local signature set is version 202206133856730 Jun 16 03:45:10 root maldet(5778): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 16 03:45:10 root maldet(5778): {sigup} latest signature set already installed Jun 16 03:45:10 root maldet(5902): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 16 03:45:11 root maldet(5902): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 16 03:45:11 root maldet(5902): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 16 03:45:11 root maldet(5902): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 16 03:45:11 root maldet(5902): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 16 03:45:19 root maldet(5902): {scan} file list completed in 8s, found 737 files... Jun 16 03:45:19 root maldet(5902): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 16 03:45:19 root maldet(5902): {scan} scan of (737 files) in progress... Jun 16 03:45:51 root maldet(5902): {scan} scan completed on : files 737, malware hits 0, cleaned hits 0, time 41s Jun 16 03:45:51 root maldet(5902): {scan} scan report saved, to view run: maldet --report 220616-0345.5902 Jun 17 03:31:01 root maldet(24066): {update} checking for available updates... Jun 17 03:31:02 root maldet(24066): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 17 03:31:02 root maldet(24066): {update} hashing install files and checking against server... Jun 17 03:31:02 root maldet(24066): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 17 03:31:02 root maldet(24066): {update} latest version already installed. Jun 17 03:31:02 root maldet(24212): {sigup} performing signature update check... Jun 17 03:31:02 root maldet(24212): {sigup} local signature set is version 202206133856730 Jun 17 03:31:03 root maldet(24212): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 17 03:31:03 root maldet(24212): {sigup} new signature set 20220616339377 available Jun 17 03:31:03 root maldet(24212): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 17 03:31:03 root maldet(24212): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 17 03:31:03 root maldet(24212): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 17 03:31:04 root maldet(24212): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 17 03:31:04 root maldet(24212): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 17 03:31:04 root maldet(24212): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 17 03:31:04 root maldet(24212): {sigup} verified md5sum of maldet-sigpack.tgz Jun 17 03:31:06 root maldet(24212): {sigup} unpacked and installed maldet-sigpack.tgz Jun 17 03:31:06 root maldet(24212): {sigup} verified md5sum of maldet-clean.tgz Jun 17 03:31:06 root maldet(24212): {sigup} unpacked and installed maldet-clean.tgz Jun 17 03:31:06 root maldet(24212): {sigup} signature set update completed Jun 17 03:31:06 root maldet(24212): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 17 03:31:06 root maldet(24467): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 17 03:31:06 root maldet(24467): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 17 03:31:06 root maldet(24467): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 17 03:31:06 root maldet(24467): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 17 03:31:06 root maldet(24467): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 17 03:31:14 root maldet(24467): {scan} file list completed in 8s, found 27742 files... Jun 17 03:31:14 root maldet(24467): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 17 03:31:14 root maldet(24467): {scan} scan of (27742 files) in progress... Jun 17 03:32:38 root maldet(24467): {scan} scan completed on : files 27742, malware hits 0, cleaned hits 0, time 89s Jun 17 03:32:38 root maldet(24467): {scan} scan report saved, to view run: maldet --report 220617-0331.24467 Jun 18 03:35:35 root maldet(23585): {update} checking for available updates... Jun 18 03:35:36 root maldet(23585): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 18 03:35:36 root maldet(23585): {update} hashing install files and checking against server... Jun 18 03:35:36 root maldet(23585): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 18 03:35:36 root maldet(23585): {update} latest version already installed. Jun 18 03:35:36 root maldet(23730): {sigup} performing signature update check... Jun 18 03:35:36 root maldet(23730): {sigup} local signature set is version 20220616339377 Jun 18 03:35:37 root maldet(23730): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 18 03:35:37 root maldet(23730): {sigup} latest signature set already installed Jun 18 03:35:37 root maldet(23844): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 18 03:35:37 root maldet(23844): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 18 03:35:37 root maldet(23844): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 18 03:35:37 root maldet(23844): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 18 03:35:37 root maldet(23844): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 18 03:35:44 root maldet(23844): {scan} file list completed in 7s, found 33304 files... Jun 18 03:35:44 root maldet(23844): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 18 03:35:44 root maldet(23844): {scan} scan of (33304 files) in progress... Jun 18 03:37:44 root maldet(23844): {scan} scan completed on : files 33304, malware hits 0, cleaned hits 0, time 127s Jun 18 03:37:44 root maldet(23844): {scan} scan report saved, to view run: maldet --report 220618-0335.23844 Jun 19 03:16:29 root maldet(28577): {update} checking for available updates... Jun 19 03:16:30 root maldet(28577): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 19 03:16:30 root maldet(28577): {update} hashing install files and checking against server... Jun 19 03:16:30 root maldet(28577): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 19 03:16:30 root maldet(28577): {update} latest version already installed. Jun 19 03:16:30 root maldet(28781): {sigup} performing signature update check... Jun 19 03:16:30 root maldet(28781): {sigup} local signature set is version 20220616339377 Jun 19 03:16:31 root maldet(28781): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 19 03:16:32 root maldet(28781): {sigup} latest signature set already installed Jun 19 03:16:32 root maldet(28948): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 19 03:16:34 root maldet(28948): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 19 03:16:34 root maldet(28948): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 19 03:16:34 root maldet(28948): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 19 03:16:34 root maldet(28948): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 19 03:34:54 root maldet(28948): {scan} file list completed in 1100s, found 33305 files... Jun 19 03:34:54 root maldet(28948): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 19 03:34:54 root maldet(28948): {scan} scan of (33305 files) in progress... Jun 19 03:39:46 root maldet(28948): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Jun 19 03:39:46 root maldet(28948): {scan} scan completed on : files 33305, malware hits 0, cleaned hits 0, time 1394s Jun 19 03:39:46 root maldet(28948): {scan} scan report saved, to view run: maldet --report 220619-0316.28948 Jun 20 03:27:18 root maldet(10527): {update} checking for available updates... Jun 20 03:27:19 root maldet(10527): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 20 03:27:19 root maldet(10527): {update} hashing install files and checking against server... Jun 20 03:27:19 root maldet(10527): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 20 03:27:19 root maldet(10527): {update} latest version already installed. Jun 20 03:27:19 root maldet(10665): {sigup} performing signature update check... Jun 20 03:27:19 root maldet(10665): {sigup} local signature set is version 20220616339377 Jun 20 03:27:20 root maldet(10665): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 20 03:27:20 root maldet(10665): {sigup} new signature set 202206191014456 available Jun 20 03:27:20 root maldet(10665): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 20 03:27:20 root maldet(10665): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 20 03:27:21 root maldet(10665): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 20 03:27:21 root maldet(10665): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 20 03:27:21 root maldet(10665): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 20 03:27:21 root maldet(10665): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 20 03:27:21 root maldet(10665): {sigup} verified md5sum of maldet-sigpack.tgz Jun 20 03:27:24 root maldet(10665): {sigup} unpacked and installed maldet-sigpack.tgz Jun 20 03:27:24 root maldet(10665): {sigup} verified md5sum of maldet-clean.tgz Jun 20 03:27:24 root maldet(10665): {sigup} unpacked and installed maldet-clean.tgz Jun 20 03:27:24 root maldet(10665): {sigup} signature set update completed Jun 20 03:27:24 root maldet(10665): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 20 03:27:24 root maldet(10937): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 20 03:27:24 root maldet(10937): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 20 03:27:24 root maldet(10937): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 20 03:27:24 root maldet(10937): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 20 03:27:24 root maldet(10937): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 20 03:27:32 root maldet(10937): {scan} file list completed in 8s, found 33387 files... Jun 20 03:27:32 root maldet(10937): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 20 03:27:32 root maldet(10937): {scan} scan of (33387 files) in progress... Jun 20 03:28:56 root maldet(10937): {scan} scan completed on : files 33387, malware hits 0, cleaned hits 0, time 92s Jun 20 03:28:56 root maldet(10937): {scan} scan report saved, to view run: maldet --report 220620-0327.10937 Jun 21 03:49:45 root maldet(22931): {update} checking for available updates... Jun 21 03:49:46 root maldet(22931): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 21 03:49:46 root maldet(22931): {update} hashing install files and checking against server... Jun 21 03:49:46 root maldet(22931): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 21 03:49:46 root maldet(22931): {update} latest version already installed. Jun 21 03:49:46 root maldet(23076): {sigup} performing signature update check... Jun 21 03:49:46 root maldet(23076): {sigup} local signature set is version 202206191014456 Jun 21 03:49:47 root maldet(23076): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 21 03:49:47 root maldet(23076): {sigup} latest signature set already installed Jun 21 03:49:47 root maldet(23191): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 21 03:49:47 root maldet(23191): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 21 03:49:47 root maldet(23191): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 21 03:49:47 root maldet(23191): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 21 03:49:47 root maldet(23191): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 21 03:49:54 root maldet(23191): {scan} file list completed in 7s, found 27626 files... Jun 21 03:49:54 root maldet(23191): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 21 03:49:54 root maldet(23191): {scan} scan of (27626 files) in progress... Jun 21 03:50:37 root maldet(23191): {scan} scan completed on : files 27626, malware hits 0, cleaned hits 0, time 50s Jun 21 03:50:37 root maldet(23191): {scan} scan report saved, to view run: maldet --report 220621-0349.23191 Jun 22 03:28:18 root maldet(21040): {update} checking for available updates... Jun 22 03:28:18 root maldet(21040): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 22 03:28:18 root maldet(21040): {update} hashing install files and checking against server... Jun 22 03:28:19 root maldet(21040): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 22 03:28:19 root maldet(21040): {update} latest version already installed. Jun 22 03:28:19 root maldet(21188): {sigup} performing signature update check... Jun 22 03:28:19 root maldet(21188): {sigup} local signature set is version 202206191014456 Jun 22 03:28:19 root maldet(21188): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 22 03:28:19 root maldet(21188): {sigup} latest signature set already installed Jun 22 03:28:20 root maldet(21304): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 22 03:28:21 root maldet(21304): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 22 03:28:21 root maldet(21304): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 22 03:28:21 root maldet(21304): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 22 03:28:21 root maldet(21304): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 22 03:56:53 root maldet(21304): {scan} file list completed in 1712s, found 172743 files... Jun 22 03:56:53 root maldet(21304): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 22 03:56:53 root maldet(21304): {scan} scan of (172743 files) in progress... Jun 22 04:38:40 root maldet(21304): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Jun 22 04:38:40 root maldet(21304): {scan} scan completed on : files 172743, malware hits 0, cleaned hits 0, time 4220s Jun 22 04:38:40 root maldet(21304): {scan} scan report saved, to view run: maldet --report 220622-0328.21304 Jun 23 03:24:33 root maldet(20816): {update} checking for available updates... Jun 23 03:24:33 root maldet(20816): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 23 03:24:33 root maldet(20816): {update} hashing install files and checking against server... Jun 23 03:24:34 root maldet(20816): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 23 03:24:34 root maldet(20816): {update} latest version already installed. Jun 23 03:24:34 root maldet(20966): {sigup} performing signature update check... Jun 23 03:24:34 root maldet(20966): {sigup} local signature set is version 202206191014456 Jun 23 03:24:34 root maldet(20966): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 23 03:24:34 root maldet(20966): {sigup} new signature set 202206221689233 available Jun 23 03:24:34 root maldet(20966): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 23 03:24:35 root maldet(20966): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 23 03:24:35 root maldet(20966): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 23 03:24:35 root maldet(20966): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 23 03:24:36 root maldet(20966): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 23 03:24:36 root maldet(20966): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 23 03:24:36 root maldet(20966): {sigup} verified md5sum of maldet-sigpack.tgz Jun 23 03:24:38 root maldet(20966): {sigup} unpacked and installed maldet-sigpack.tgz Jun 23 03:24:38 root maldet(20966): {sigup} verified md5sum of maldet-clean.tgz Jun 23 03:24:38 root maldet(20966): {sigup} unpacked and installed maldet-clean.tgz Jun 23 03:24:38 root maldet(20966): {sigup} signature set update completed Jun 23 03:24:38 root maldet(20966): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 23 03:24:38 root maldet(21231): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 23 03:24:38 root maldet(21231): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 23 03:24:38 root maldet(21231): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 23 03:24:38 root maldet(21231): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 23 03:24:38 root maldet(21231): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 23 03:24:47 root maldet(21231): {scan} file list completed in 9s, found 56883 files... Jun 23 03:24:47 root maldet(21231): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 23 03:24:47 root maldet(21231): {scan} scan of (56883 files) in progress... Jun 23 03:31:11 root maldet(21231): {scan} scan completed on : files 56883, malware hits 0, cleaned hits 0, time 393s Jun 23 03:31:11 root maldet(21231): {scan} scan report saved, to view run: maldet --report 220623-0324.21231 Jun 24 03:20:56 root maldet(602): {update} checking for available updates... Jun 24 03:20:56 root maldet(602): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 24 03:20:56 root maldet(602): {update} hashing install files and checking against server... Jun 24 03:20:56 root maldet(602): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 24 03:20:56 root maldet(602): {update} latest version already installed. Jun 24 03:20:57 root maldet(779): {sigup} performing signature update check... Jun 24 03:20:57 root maldet(779): {sigup} local signature set is version 202206221689233 Jun 24 03:20:57 root maldet(779): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 24 03:20:57 root maldet(779): {sigup} latest signature set already installed Jun 24 03:20:57 root maldet(893): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 24 03:20:57 root maldet(893): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 24 03:20:57 root maldet(893): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 24 03:20:57 root maldet(893): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 24 03:20:57 root maldet(893): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 24 03:21:04 root maldet(893): {scan} file list completed in 7s, found 675 files... Jun 24 03:21:04 root maldet(893): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 24 03:21:04 root maldet(893): {scan} scan of (675 files) in progress... Jun 24 03:21:21 root maldet(893): {scan} scan completed on : files 675, malware hits 0, cleaned hits 0, time 23s Jun 24 03:21:21 root maldet(893): {scan} scan report saved, to view run: maldet --report 220624-0320.893 Jun 25 03:35:28 root maldet(23348): {update} checking for available updates... Jun 25 03:35:28 root maldet(23348): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 25 03:35:28 root maldet(23348): {update} hashing install files and checking against server... Jun 25 03:35:29 root maldet(23348): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 25 03:35:29 root maldet(23348): {update} latest version already installed. Jun 25 03:35:29 root maldet(23483): {sigup} performing signature update check... Jun 25 03:35:29 root maldet(23483): {sigup} local signature set is version 202206221689233 Jun 25 03:35:30 root maldet(23483): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 25 03:35:30 root maldet(23483): {sigup} latest signature set already installed Jun 25 03:35:30 root maldet(23597): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 25 03:35:30 root maldet(23597): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 25 03:35:30 root maldet(23597): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 25 03:35:30 root maldet(23597): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 25 03:35:30 root maldet(23597): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 25 03:35:37 root maldet(23597): {scan} file list completed in 7s, found 722 files... Jun 25 03:35:37 root maldet(23597): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 25 03:35:37 root maldet(23597): {scan} scan of (722 files) in progress... Jun 25 03:35:52 root maldet(23597): {scan} scan completed on : files 722, malware hits 0, cleaned hits 0, time 22s Jun 25 03:35:52 root maldet(23597): {scan} scan report saved, to view run: maldet --report 220625-0335.23597 Jun 26 03:38:18 root maldet(11299): {update} checking for available updates... Jun 26 03:38:18 root maldet(11299): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 26 03:38:18 root maldet(11299): {update} hashing install files and checking against server... Jun 26 03:38:19 root maldet(11299): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 26 03:38:19 root maldet(11299): {update} latest version already installed. Jun 26 03:38:19 root maldet(11467): {sigup} performing signature update check... Jun 26 03:38:19 root maldet(11467): {sigup} local signature set is version 202206221689233 Jun 26 03:38:19 root maldet(11467): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 26 03:38:19 root maldet(11467): {sigup} new signature set 202206252364188 available Jun 26 03:38:19 root maldet(11467): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 26 03:38:20 root maldet(11467): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 26 03:38:20 root maldet(11467): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 26 03:38:20 root maldet(11467): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 26 03:38:20 root maldet(11467): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 26 03:38:21 root maldet(11467): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 26 03:38:21 root maldet(11467): {sigup} verified md5sum of maldet-sigpack.tgz Jun 26 03:38:26 root maldet(11467): {sigup} unpacked and installed maldet-sigpack.tgz Jun 26 03:38:26 root maldet(11467): {sigup} verified md5sum of maldet-clean.tgz Jun 26 03:38:26 root maldet(11467): {sigup} unpacked and installed maldet-clean.tgz Jun 26 03:38:26 root maldet(11467): {sigup} signature set update completed Jun 26 03:38:26 root maldet(11467): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 26 03:38:26 root maldet(11783): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 26 03:38:27 root maldet(11783): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 26 03:38:27 root maldet(11783): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 26 03:38:27 root maldet(11783): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 26 03:38:27 root maldet(11783): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 26 03:39:01 root maldet(11783): {scan} file list completed in 34s, found 443 files... Jun 26 03:39:01 root maldet(11783): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 26 03:39:01 root maldet(11783): {scan} scan of (443 files) in progress... Jun 26 03:39:26 root maldet(11783): {scan} scan completed on : files 443, malware hits 0, cleaned hits 0, time 60s Jun 26 03:39:26 root maldet(11783): {scan} scan report saved, to view run: maldet --report 220626-0338.11783 Jun 27 03:16:07 root maldet(22116): {update} checking for available updates... Jun 27 03:16:08 root maldet(22116): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 27 03:16:08 root maldet(22116): {update} hashing install files and checking against server... Jun 27 03:16:08 root maldet(22116): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 27 03:16:08 root maldet(22116): {update} latest version already installed. Jun 27 03:16:08 root maldet(22258): {sigup} performing signature update check... Jun 27 03:16:08 root maldet(22258): {sigup} local signature set is version 202206252364188 Jun 27 03:16:09 root maldet(22258): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 27 03:16:09 root maldet(22258): {sigup} latest signature set already installed Jun 27 03:16:09 root maldet(22372): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 27 03:16:09 root maldet(22372): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 27 03:16:09 root maldet(22372): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 27 03:16:09 root maldet(22372): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 27 03:16:09 root maldet(22372): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 27 03:16:17 root maldet(22372): {scan} file list completed in 8s, found 82709 files... Jun 27 03:16:17 root maldet(22372): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 27 03:16:17 root maldet(22372): {scan} scan of (82709 files) in progress... Jun 27 03:19:09 root maldet(22372): {scan} scan completed on : files 82709, malware hits 0, cleaned hits 0, time 180s Jun 27 03:19:09 root maldet(22372): {scan} scan report saved, to view run: maldet --report 220627-0316.22372 Jun 28 03:50:13 root maldet(28537): {update} checking for available updates... Jun 28 03:50:14 root maldet(28537): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 28 03:50:14 root maldet(28537): {update} hashing install files and checking against server... Jun 28 03:50:14 root maldet(28537): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 28 03:50:14 root maldet(28537): {update} latest version already installed. Jun 28 03:50:14 root maldet(28677): {sigup} performing signature update check... Jun 28 03:50:14 root maldet(28677): {sigup} local signature set is version 202206252364188 Jun 28 03:50:15 root maldet(28677): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 28 03:50:15 root maldet(28677): {sigup} latest signature set already installed Jun 28 03:50:17 root maldet(28795): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 28 03:50:17 root maldet(28795): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 28 03:50:17 root maldet(28795): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 28 03:50:17 root maldet(28795): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 28 03:50:17 root maldet(28795): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 28 03:50:25 root maldet(28795): {scan} file list completed in 8s, found 83 files... Jun 28 03:50:25 root maldet(28795): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 28 03:50:25 root maldet(28795): {scan} scan of (83 files) in progress... Jun 28 03:50:31 root maldet(28795): {scan} scan completed on : files 83, malware hits 0, cleaned hits 0, time 14s Jun 28 03:50:31 root maldet(28795): {scan} scan report saved, to view run: maldet --report 220628-0350.28795 Jun 29 03:45:50 root maldet(26257): {update} checking for available updates... Jun 29 03:45:50 root maldet(26257): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 29 03:45:50 root maldet(26257): {update} hashing install files and checking against server... Jun 29 03:45:51 root maldet(26257): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 29 03:45:51 root maldet(26257): {update} latest version already installed. Jun 29 03:45:51 root maldet(26406): {sigup} performing signature update check... Jun 29 03:45:51 root maldet(26406): {sigup} local signature set is version 202206252364188 Jun 29 03:45:51 root maldet(26406): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 29 03:45:51 root maldet(26406): {sigup} latest signature set already installed Jun 29 03:45:52 root maldet(26526): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 29 03:45:52 root maldet(26526): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 29 03:45:52 root maldet(26526): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 29 03:45:52 root maldet(26526): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 29 03:45:52 root maldet(26526): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 29 03:45:59 root maldet(26526): {scan} file list completed in 7s, found 27630 files... Jun 29 03:45:59 root maldet(26526): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 29 03:45:59 root maldet(26526): {scan} scan of (27630 files) in progress... Jun 29 03:46:35 root maldet(26526): {scan} scan completed on : files 27630, malware hits 0, cleaned hits 0, time 43s Jun 29 03:46:35 root maldet(26526): {scan} scan report saved, to view run: maldet --report 220629-0345.26526 Jun 30 03:49:15 root maldet(1057): {update} checking for available updates... Jun 30 03:49:15 root maldet(1057): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 30 03:49:15 root maldet(1057): {update} hashing install files and checking against server... Jun 30 03:49:15 root maldet(1057): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 30 03:49:15 root maldet(1057): {update} latest version already installed. Jun 30 03:49:16 root maldet(1196): {sigup} performing signature update check... Jun 30 03:49:16 root maldet(1196): {sigup} local signature set is version 202206252364188 Jun 30 03:49:16 root maldet(1196): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 30 03:49:16 root maldet(1196): {sigup} new signature set 202206283039520 available Jun 30 03:49:16 root maldet(1196): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 30 03:49:17 root maldet(1196): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 30 03:49:17 root maldet(1196): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 30 03:49:17 root maldet(1196): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 30 03:49:17 root maldet(1196): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 30 03:49:18 root maldet(1196): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 30 03:49:18 root maldet(1196): {sigup} verified md5sum of maldet-sigpack.tgz Jun 30 03:49:18 root maldet(1196): {sigup} unpacked and installed maldet-sigpack.tgz Jun 30 03:49:18 root maldet(1196): {sigup} verified md5sum of maldet-clean.tgz Jun 30 03:49:18 root maldet(1196): {sigup} unpacked and installed maldet-clean.tgz Jun 30 03:49:18 root maldet(1196): {sigup} signature set update completed Jun 30 03:49:18 root maldet(1196): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 30 03:49:18 root maldet(1440): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 30 03:49:18 root maldet(1440): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jun 30 03:49:18 root maldet(1440): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jun 30 03:49:18 root maldet(1440): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 30 03:49:18 root maldet(1440): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 30 03:49:25 root maldet(1440): {scan} file list completed in 7s, found 75 files... Jun 30 03:49:25 root maldet(1440): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 30 03:49:25 root maldet(1440): {scan} scan of (75 files) in progress... Jun 30 03:49:32 root maldet(1440): {scan} scan completed on : files 75, malware hits 0, cleaned hits 0, time 14s Jun 30 03:49:32 root maldet(1440): {scan} scan report saved, to view run: maldet --report 220630-0349.1440 Jul 01 03:53:51 root maldet(23790): {update} checking for available updates... Jul 01 03:53:51 root maldet(23790): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 01 03:53:51 root maldet(23790): {update} hashing install files and checking against server... Jul 01 03:53:52 root maldet(23790): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 01 03:53:52 root maldet(23790): {update} latest version already installed. Jul 01 03:53:52 root maldet(23928): {sigup} performing signature update check... Jul 01 03:53:52 root maldet(23928): {sigup} local signature set is version 202206283039520 Jul 01 03:53:52 root maldet(23928): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 01 03:53:52 root maldet(23928): {sigup} latest signature set already installed Jul 01 03:53:53 root maldet(24044): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 01 03:53:53 root maldet(24044): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 01 03:53:53 root maldet(24044): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 01 03:53:53 root maldet(24044): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 01 03:53:53 root maldet(24044): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 01 03:54:00 root maldet(24044): {scan} file list completed in 7s, found 28107 files... Jul 01 03:54:00 root maldet(24044): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 01 03:54:00 root maldet(24044): {scan} scan of (28107 files) in progress... Jul 01 03:54:59 root maldet(24044): {scan} scan completed on : files 28107, malware hits 0, cleaned hits 0, time 66s Jul 01 03:54:59 root maldet(24044): {scan} scan report saved, to view run: maldet --report 220701-0353.24044 Jul 02 03:38:19 root maldet(11235): {update} checking for available updates... Jul 02 03:38:20 root maldet(11235): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 02 03:38:20 root maldet(11235): {update} hashing install files and checking against server... Jul 02 03:38:20 root maldet(11235): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 02 03:38:20 root maldet(11235): {update} latest version already installed. Jul 02 03:38:20 root maldet(11372): {sigup} performing signature update check... Jul 02 03:38:20 root maldet(11372): {sigup} local signature set is version 202206283039520 Jul 02 03:38:21 root maldet(11372): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 02 03:38:21 root maldet(11372): {sigup} latest signature set already installed Jul 02 03:38:21 root maldet(11496): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 02 03:38:21 root maldet(11496): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 02 03:38:21 root maldet(11496): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 02 03:38:21 root maldet(11496): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 02 03:38:21 root maldet(11496): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 02 03:38:28 root maldet(11496): {scan} file list completed in 7s, found 6639 files... Jul 02 03:38:28 root maldet(11496): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 02 03:38:28 root maldet(11496): {scan} scan of (6639 files) in progress... Jul 02 03:39:03 root maldet(11496): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Jul 02 03:39:03 root maldet(11496): {scan} scan completed on : files 6639, malware hits 0, cleaned hits 0, time 42s Jul 02 03:39:03 root maldet(11496): {scan} scan report saved, to view run: maldet --report 220702-0338.11496 Jul 03 04:01:01 root maldet(22237): {update} checking for available updates... Jul 03 04:01:02 root maldet(22237): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 03 04:01:02 root maldet(22237): {update} hashing install files and checking against server... Jul 03 04:01:03 root maldet(22237): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 03 04:01:03 root maldet(22237): {update} latest version already installed. Jul 03 04:01:03 root maldet(22404): {sigup} performing signature update check... Jul 03 04:01:03 root maldet(22404): {sigup} local signature set is version 202206283039520 Jul 03 04:01:03 root maldet(22404): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 03 04:01:03 root maldet(22404): {sigup} new signature set 202207013714866 available Jul 03 04:01:03 root maldet(22404): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 03 04:01:04 root maldet(22404): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 03 04:01:04 root maldet(22404): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 03 04:01:04 root maldet(22404): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 03 04:01:04 root maldet(22404): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 03 04:01:05 root maldet(22404): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 03 04:01:05 root maldet(22404): {sigup} verified md5sum of maldet-sigpack.tgz Jul 03 04:01:05 root maldet(22404): {sigup} unpacked and installed maldet-sigpack.tgz Jul 03 04:01:05 root maldet(22404): {sigup} verified md5sum of maldet-clean.tgz Jul 03 04:01:05 root maldet(22404): {sigup} unpacked and installed maldet-clean.tgz Jul 03 04:01:05 root maldet(22404): {sigup} signature set update completed Jul 03 04:01:05 root maldet(22404): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 03 04:01:05 root maldet(22690): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 03 04:01:05 root maldet(22690): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 03 04:01:05 root maldet(22690): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 03 04:01:05 root maldet(22690): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 03 04:01:05 root maldet(22690): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 03 04:01:13 root maldet(22690): {scan} file list completed in 8s, found 56966 files... Jul 03 04:01:14 root maldet(22690): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 03 04:01:14 root maldet(22690): {scan} scan of (56966 files) in progress... Jul 03 04:04:24 root maldet(22690): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Jul 03 04:04:24 root maldet(22690): {scan} scan completed on : files 56966, malware hits 0, cleaned hits 0, time 199s Jul 03 04:04:24 root maldet(22690): {scan} scan report saved, to view run: maldet --report 220703-0401.22690 Jul 04 03:54:26 root maldet(15337): {update} checking for available updates... Jul 04 03:54:26 root maldet(15337): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 04 03:54:26 root maldet(15337): {update} hashing install files and checking against server... Jul 04 03:54:27 root maldet(15337): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 04 03:54:27 root maldet(15337): {update} latest version already installed. Jul 04 03:54:27 root maldet(15476): {sigup} performing signature update check... Jul 04 03:54:27 root maldet(15476): {sigup} local signature set is version 202207013714866 Jul 04 03:54:27 root maldet(15476): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 04 03:54:27 root maldet(15476): {sigup} latest signature set already installed Jul 04 03:54:28 root maldet(15600): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 04 03:54:28 root maldet(15600): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 04 03:54:28 root maldet(15600): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 04 03:54:28 root maldet(15600): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 04 03:54:28 root maldet(15600): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 04 03:54:35 root maldet(15600): {scan} file list completed in 7s, found 5891 files... Jul 04 03:54:35 root maldet(15600): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 04 03:54:35 root maldet(15600): {scan} scan of (5891 files) in progress... Jul 04 03:54:53 root maldet(15600): {scan} scan completed on : files 5891, malware hits 0, cleaned hits 0, time 25s Jul 04 03:54:53 root maldet(15600): {scan} scan report saved, to view run: maldet --report 220704-0354.15600 Jul 05 03:45:22 root maldet(27695): {update} checking for available updates... Jul 05 03:45:23 root maldet(27695): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 05 03:45:23 root maldet(27695): {update} hashing install files and checking against server... Jul 05 03:45:23 root maldet(27695): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 05 03:45:23 root maldet(27695): {update} latest version already installed. Jul 05 03:45:23 root maldet(27834): {sigup} performing signature update check... Jul 05 03:45:23 root maldet(27834): {sigup} local signature set is version 202207013714866 Jul 05 03:45:24 root maldet(27834): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 05 03:45:24 root maldet(27834): {sigup} latest signature set already installed Jul 05 03:45:24 root maldet(27954): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 05 03:45:24 root maldet(27954): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 05 03:45:24 root maldet(27954): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 05 03:45:24 root maldet(27954): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 05 03:45:24 root maldet(27954): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 05 03:45:31 root maldet(27954): {scan} file list completed in 7s, found 56874 files... Jul 05 03:45:31 root maldet(27954): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 05 03:45:31 root maldet(27954): {scan} scan of (56874 files) in progress... Jul 05 03:47:29 root maldet(27954): {scan} scan completed on : files 56874, malware hits 0, cleaned hits 0, time 125s Jul 05 03:47:29 root maldet(27954): {scan} scan report saved, to view run: maldet --report 220705-0345.27954 Jul 06 03:39:27 root maldet(32540): {update} checking for available updates... Jul 06 03:39:28 root maldet(32540): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 06 03:39:28 root maldet(32540): {update} hashing install files and checking against server... Jul 06 03:39:28 root maldet(32540): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 06 03:39:28 root maldet(32540): {update} latest version already installed. Jul 06 03:39:28 root maldet(32680): {sigup} performing signature update check... Jul 06 03:39:28 root maldet(32680): {sigup} local signature set is version 202207013714866 Jul 06 03:39:29 root maldet(32680): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 06 03:39:29 root maldet(32680): {sigup} new signature set 20220704195823 available Jul 06 03:39:29 root maldet(32680): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 06 03:39:29 root maldet(32680): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 06 03:39:30 root maldet(32680): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 06 03:39:30 root maldet(32680): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 06 03:39:30 root maldet(32680): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 06 03:39:30 root maldet(32680): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 06 03:39:30 root maldet(32680): {sigup} verified md5sum of maldet-sigpack.tgz Jul 06 03:39:31 root maldet(32680): {sigup} unpacked and installed maldet-sigpack.tgz Jul 06 03:39:31 root maldet(32680): {sigup} verified md5sum of maldet-clean.tgz Jul 06 03:39:31 root maldet(32680): {sigup} unpacked and installed maldet-clean.tgz Jul 06 03:39:31 root maldet(32680): {sigup} signature set update completed Jul 06 03:39:31 root maldet(32680): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 06 03:39:31 root maldet(495): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 06 03:39:31 root maldet(495): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 06 03:39:31 root maldet(495): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 06 03:39:31 root maldet(495): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 06 03:39:31 root maldet(495): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 06 03:39:38 root maldet(495): {scan} file list completed in 7s, found 11547 files... Jul 06 03:39:38 root maldet(495): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 06 03:39:38 root maldet(495): {scan} scan of (11547 files) in progress... Jul 06 03:40:38 root maldet(495): {scan} scan completed on : files 11547, malware hits 0, cleaned hits 0, time 67s Jul 06 03:40:38 root maldet(495): {scan} scan report saved, to view run: maldet --report 220706-0339.495 Jul 07 03:42:31 root maldet(14168): {update} checking for available updates... Jul 07 03:42:31 root maldet(14168): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 07 03:42:31 root maldet(14168): {update} hashing install files and checking against server... Jul 07 03:42:32 root maldet(14168): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 07 03:42:32 root maldet(14168): {update} latest version already installed. Jul 07 03:42:32 root maldet(14311): {sigup} performing signature update check... Jul 07 03:42:32 root maldet(14311): {sigup} local signature set is version 20220704195823 Jul 07 03:42:32 root maldet(14311): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 07 03:42:32 root maldet(14311): {sigup} latest signature set already installed Jul 07 03:42:32 root maldet(14425): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 07 03:42:33 root maldet(14425): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 07 03:42:33 root maldet(14425): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 07 03:42:33 root maldet(14425): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 07 03:42:33 root maldet(14425): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 07 03:42:40 root maldet(14425): {scan} file list completed in 7s, found 35684 files... Jul 07 03:42:40 root maldet(14425): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 07 03:42:40 root maldet(14425): {scan} scan of (35684 files) in progress... Jul 07 03:45:54 root maldet(14425): {scan} scan completed on : files 35684, malware hits 0, cleaned hits 0, time 202s Jul 07 03:45:54 root maldet(14425): {scan} scan report saved, to view run: maldet --report 220707-0342.14425 Jul 08 03:30:40 root maldet(1964): {update} checking for available updates... Jul 08 03:30:41 root maldet(1964): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 08 03:30:41 root maldet(1964): {update} hashing install files and checking against server... Jul 08 03:30:41 root maldet(1964): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 08 03:30:41 root maldet(1964): {update} latest version already installed. Jul 08 03:30:41 root maldet(2112): {sigup} performing signature update check... Jul 08 03:30:41 root maldet(2112): {sigup} local signature set is version 20220704195823 Jul 08 03:30:42 root maldet(2112): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 08 03:30:42 root maldet(2112): {sigup} new signature set 20220707870935 available Jul 08 03:30:42 root maldet(2112): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 08 03:30:42 root maldet(2112): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 08 03:30:43 root maldet(2112): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 08 03:30:43 root maldet(2112): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 08 03:30:43 root maldet(2112): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 08 03:30:43 root maldet(2112): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 08 03:30:43 root maldet(2112): {sigup} verified md5sum of maldet-sigpack.tgz Jul 08 03:30:44 root maldet(2112): {sigup} unpacked and installed maldet-sigpack.tgz Jul 08 03:30:44 root maldet(2112): {sigup} verified md5sum of maldet-clean.tgz Jul 08 03:30:44 root maldet(2112): {sigup} unpacked and installed maldet-clean.tgz Jul 08 03:30:44 root maldet(2112): {sigup} signature set update completed Jul 08 03:30:44 root maldet(2112): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 08 03:30:44 root maldet(2370): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 08 03:30:44 root maldet(2370): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 08 03:30:44 root maldet(2370): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 08 03:30:44 root maldet(2370): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 08 03:30:44 root maldet(2370): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 08 03:30:52 root maldet(2370): {scan} file list completed in 8s, found 145753 files... Jul 08 03:30:52 root maldet(2370): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 08 03:30:52 root maldet(2370): {scan} scan of (145753 files) in progress... Jul 08 03:36:00 root maldet(2370): {scan} scan completed on : files 145753, malware hits 0, cleaned hits 0, time 316s Jul 08 03:36:00 root maldet(2370): {scan} scan report saved, to view run: maldet --report 220708-0330.2370 Jul 09 03:44:39 root maldet(3866): {update} checking for available updates... Jul 09 03:44:39 root maldet(3866): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 09 03:44:39 root maldet(3866): {update} hashing install files and checking against server... Jul 09 03:44:40 root maldet(3866): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 09 03:44:40 root maldet(3866): {update} latest version already installed. Jul 09 03:44:40 root maldet(4014): {sigup} performing signature update check... Jul 09 03:44:40 root maldet(4014): {sigup} local signature set is version 20220707870935 Jul 09 03:44:41 root maldet(4014): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 09 03:44:41 root maldet(4014): {sigup} latest signature set already installed Jul 09 03:44:41 root maldet(4141): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 09 03:44:41 root maldet(4141): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 09 03:44:41 root maldet(4141): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 09 03:44:41 root maldet(4141): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 09 03:44:41 root maldet(4141): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 09 03:44:49 root maldet(4141): {scan} file list completed in 8s, found 86215 files... Jul 09 03:44:49 root maldet(4141): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 09 03:44:49 root maldet(4141): {scan} scan of (86215 files) in progress... Jul 09 03:46:45 root maldet(4141): {scan} scan completed on : files 86215, malware hits 0, cleaned hits 0, time 124s Jul 09 03:46:45 root maldet(4141): {scan} scan report saved, to view run: maldet --report 220709-0344.4141 Jul 10 03:19:54 root maldet(574): {update} checking for available updates... Jul 10 03:19:54 root maldet(574): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 10 03:19:54 root maldet(574): {update} hashing install files and checking against server... Jul 10 03:19:54 root maldet(574): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 10 03:19:54 root maldet(574): {update} latest version already installed. Jul 10 03:19:54 root maldet(776): {sigup} performing signature update check... Jul 10 03:19:54 root maldet(776): {sigup} local signature set is version 20220707870935 Jul 10 03:19:55 root maldet(776): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 10 03:19:55 root maldet(776): {sigup} latest signature set already installed Jul 10 03:19:55 root maldet(895): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 10 03:19:55 root maldet(895): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 10 03:19:55 root maldet(895): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 10 03:19:55 root maldet(895): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 10 03:19:55 root maldet(895): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 10 03:20:03 root maldet(895): {scan} file list completed in 8s, found 11550 files... Jul 10 03:20:03 root maldet(895): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 10 03:20:03 root maldet(895): {scan} scan of (11550 files) in progress... Jul 10 03:20:22 root maldet(895): {scan} scan completed on : files 11550, malware hits 0, cleaned hits 0, time 26s Jul 10 03:20:22 root maldet(895): {scan} scan report saved, to view run: maldet --report 220710-0319.895 Jul 11 04:03:56 root maldet(16509): {update} checking for available updates... Jul 11 04:03:57 root maldet(16509): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 11 04:03:57 root maldet(16509): {update} hashing install files and checking against server... Jul 11 04:03:57 root maldet(16509): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 11 04:03:57 root maldet(16509): {update} latest version already installed. Jul 11 04:03:57 root maldet(16656): {sigup} performing signature update check... Jul 11 04:03:57 root maldet(16656): {sigup} local signature set is version 20220707870935 Jul 11 04:03:57 root maldet(16656): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 11 04:03:57 root maldet(16656): {sigup} new signature set 202207101545749 available Jul 11 04:03:57 root maldet(16656): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 11 04:03:58 root maldet(16656): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 11 04:03:58 root maldet(16656): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 11 04:03:58 root maldet(16656): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 11 04:03:59 root maldet(16656): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 11 04:03:59 root maldet(16656): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 11 04:03:59 root maldet(16656): {sigup} verified md5sum of maldet-sigpack.tgz Jul 11 04:03:59 root maldet(16656): {sigup} unpacked and installed maldet-sigpack.tgz Jul 11 04:03:59 root maldet(16656): {sigup} verified md5sum of maldet-clean.tgz Jul 11 04:03:59 root maldet(16656): {sigup} unpacked and installed maldet-clean.tgz Jul 11 04:03:59 root maldet(16656): {sigup} signature set update completed Jul 11 04:03:59 root maldet(16656): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 11 04:03:59 root maldet(16914): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 11 04:04:00 root maldet(16914): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 11 04:04:00 root maldet(16914): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 11 04:04:00 root maldet(16914): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 11 04:04:00 root maldet(16914): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 11 04:04:07 root maldet(16914): {scan} file list completed in 7s, found 5747 files... Jul 11 04:04:07 root maldet(16914): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 11 04:04:07 root maldet(16914): {scan} scan of (5747 files) in progress... Jul 11 04:04:29 root maldet(16914): {scan} scan completed on : files 5747, malware hits 0, cleaned hits 0, time 30s Jul 11 04:04:29 root maldet(16914): {scan} scan report saved, to view run: maldet --report 220711-0403.16914 Jul 12 03:32:12 root maldet(2253): {update} checking for available updates... Jul 12 03:32:13 root maldet(2253): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 12 03:32:13 root maldet(2253): {update} hashing install files and checking against server... Jul 12 03:32:13 root maldet(2253): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 12 03:32:13 root maldet(2253): {update} latest version already installed. Jul 12 03:32:14 root maldet(2399): {sigup} performing signature update check... Jul 12 03:32:14 root maldet(2399): {sigup} local signature set is version 202207101545749 Jul 12 03:32:14 root maldet(2399): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 12 03:32:14 root maldet(2399): {sigup} latest signature set already installed Jul 12 03:32:14 root maldet(2521): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 12 03:32:14 root maldet(2521): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 12 03:32:14 root maldet(2521): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 12 03:32:14 root maldet(2521): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 12 03:32:14 root maldet(2521): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 12 03:32:23 root maldet(2521): {scan} file list completed in 9s, found 27603 files... Jul 12 03:32:23 root maldet(2521): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 12 03:32:23 root maldet(2521): {scan} scan of (27603 files) in progress... Jul 12 03:32:59 root maldet(2521): {scan} scan completed on : files 27603, malware hits 0, cleaned hits 0, time 45s Jul 12 03:32:59 root maldet(2521): {scan} scan report saved, to view run: maldet --report 220712-0332.2521 Jul 13 03:19:16 root maldet(15378): {update} checking for available updates... Jul 13 03:19:17 root maldet(15378): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 13 03:19:17 root maldet(15378): {update} hashing install files and checking against server... Jul 13 03:19:17 root maldet(15378): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 13 03:19:17 root maldet(15378): {update} latest version already installed. Jul 13 03:19:17 root maldet(15525): {sigup} performing signature update check... Jul 13 03:19:17 root maldet(15525): {sigup} local signature set is version 202207101545749 Jul 13 03:19:18 root maldet(15525): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 13 03:19:18 root maldet(15525): {sigup} latest signature set already installed Jul 13 03:19:18 root maldet(15651): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 13 03:19:18 root maldet(15651): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 13 03:19:18 root maldet(15651): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 13 03:19:18 root maldet(15651): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 13 03:19:18 root maldet(15651): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 13 03:19:25 root maldet(15651): {scan} file list completed in 7s, found 98 files... Jul 13 03:19:25 root maldet(15651): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 13 03:19:25 root maldet(15651): {scan} scan of (98 files) in progress... Jul 13 03:19:37 root maldet(15651): {scan} scan completed on : files 98, malware hits 0, cleaned hits 0, time 19s Jul 13 03:19:37 root maldet(15651): {scan} scan report saved, to view run: maldet --report 220713-0319.15651 Jul 14 03:50:51 root maldet(3697): {update} checking for available updates... Jul 14 03:50:52 root maldet(3697): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 14 03:50:52 root maldet(3697): {update} hashing install files and checking against server... Jul 14 03:50:52 root maldet(3697): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 14 03:50:52 root maldet(3697): {update} latest version already installed. Jul 14 03:50:52 root maldet(3833): {sigup} performing signature update check... Jul 14 03:50:52 root maldet(3833): {sigup} local signature set is version 202207101545749 Jul 14 03:50:53 root maldet(3833): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 14 03:50:53 root maldet(3833): {sigup} new signature set 202207132220497 available Jul 14 03:50:53 root maldet(3833): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 14 03:50:53 root maldet(3833): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 14 03:50:54 root maldet(3833): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 14 03:50:54 root maldet(3833): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 14 03:50:54 root maldet(3833): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 14 03:50:54 root maldet(3833): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 14 03:50:54 root maldet(3833): {sigup} verified md5sum of maldet-sigpack.tgz Jul 14 03:50:56 root maldet(3833): {sigup} unpacked and installed maldet-sigpack.tgz Jul 14 03:50:56 root maldet(3833): {sigup} verified md5sum of maldet-clean.tgz Jul 14 03:50:56 root maldet(3833): {sigup} unpacked and installed maldet-clean.tgz Jul 14 03:50:56 root maldet(3833): {sigup} signature set update completed Jul 14 03:50:56 root maldet(3833): {sigup} 17272 signatures (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 14 03:50:56 root maldet(4089): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 14 03:50:56 root maldet(4089): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 14 03:50:56 root maldet(4089): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 14 03:50:56 root maldet(4089): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 14 03:50:56 root maldet(4089): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 14 03:51:04 root maldet(4089): {scan} file list completed in 8s, found 55112 files... Jul 14 03:51:04 root maldet(4089): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 14 03:51:04 root maldet(4089): {scan} scan of (55112 files) in progress... Jul 14 03:52:12 root maldet(4089): {scan} scan completed on : files 55112, malware hits 0, cleaned hits 0, time 76s Jul 14 03:52:12 root maldet(4089): {scan} scan report saved, to view run: maldet --report 220714-0350.4089 Jul 15 03:34:47 root maldet(6230): {update} checking for available updates... Jul 15 03:34:48 root maldet(6230): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 15 03:34:48 root maldet(6230): {update} hashing install files and checking against server... Jul 15 03:34:48 root maldet(6230): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 15 03:34:48 root maldet(6230): {update} latest version already installed. Jul 15 03:34:48 root maldet(6366): {sigup} performing signature update check... Jul 15 03:34:48 root maldet(6366): {sigup} local signature set is version 202207132220497 Jul 15 03:34:49 root maldet(6366): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 15 03:34:49 root maldet(6366): {sigup} latest signature set already installed Jul 15 03:34:49 root maldet(6480): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 15 03:34:49 root maldet(6480): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 15 03:34:49 root maldet(6480): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 15 03:34:49 root maldet(6480): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 15 03:34:49 root maldet(6480): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 15 03:34:56 root maldet(6480): {scan} file list completed in 7s, found 5893 files... Jul 15 03:34:56 root maldet(6480): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 15 03:34:56 root maldet(6480): {scan} scan of (5893 files) in progress... Jul 15 03:35:09 root maldet(6480): {hit} malware hit {HEX}php.nested.base64.637 found for /home/grgaccessories/public_html/css/load.php Jul 15 03:35:09 root maldet(6480): {quar} malware quarantined from '/home/grgaccessories/public_html/css/load.php' to '/usr/local/maldetect/quarantine/load.php.53524369' Jul 15 03:35:09 root maldet(6480): {scan} scan completed on : files 5893, malware hits 1, cleaned hits 0, time 20s Jul 15 03:35:09 root maldet(6480): {scan} scan report saved, to view run: maldet --report 220715-0334.6480 Jul 16 03:24:02 root maldet(13636): {update} checking for available updates... Jul 16 03:24:02 root maldet(13636): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 16 03:24:02 root maldet(13636): {update} hashing install files and checking against server... Jul 16 03:24:02 root maldet(13636): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 16 03:24:02 root maldet(13636): {update} latest version already installed. Jul 16 03:24:03 root maldet(13774): {sigup} performing signature update check... Jul 16 03:24:03 root maldet(13774): {sigup} local signature set is version 202207132220497 Jul 16 03:24:03 root maldet(13774): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 16 03:24:03 root maldet(13774): {sigup} latest signature set already installed Jul 16 03:24:03 root maldet(13889): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 16 03:24:03 root maldet(13889): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 16 03:24:03 root maldet(13889): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 16 03:24:03 root maldet(13889): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 16 03:24:03 root maldet(13889): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 16 03:24:11 root maldet(13889): {scan} file list completed in 8s, found 86265 files... Jul 16 03:24:11 root maldet(13889): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 16 03:24:11 root maldet(13889): {scan} scan of (86265 files) in progress... Jul 16 03:26:51 root maldet(13889): {scan} scan completed on : files 86265, malware hits 0, cleaned hits 0, time 168s Jul 16 03:26:51 root maldet(13889): {scan} scan report saved, to view run: maldet --report 220716-0324.13889 Jul 17 03:43:40 root maldet(10968): {update} checking for available updates... Jul 17 03:43:41 root maldet(10968): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 17 03:43:41 root maldet(10968): {update} hashing install files and checking against server... Jul 17 03:43:41 root maldet(10968): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 17 03:43:41 root maldet(10968): {update} latest version already installed. Jul 17 03:43:41 root maldet(11102): {sigup} performing signature update check... Jul 17 03:43:41 root maldet(11102): {sigup} local signature set is version 202207132220497 Jul 17 03:43:42 root maldet(11102): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 17 03:43:42 root maldet(11102): {sigup} latest signature set already installed Jul 17 03:43:42 root maldet(11214): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 17 03:43:42 root maldet(11214): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 17 03:43:42 root maldet(11214): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 17 03:43:42 root maldet(11214): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 17 03:43:42 root maldet(11214): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 17 03:43:50 root maldet(11214): {scan} file list completed in 8s, found 5940 files... Jul 17 03:43:50 root maldet(11214): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 17 03:43:50 root maldet(11214): {scan} scan of (5940 files) in progress... Jul 17 03:44:04 root maldet(11214): {hit} malware hit {HEX}php.nested.base64.637 found for /home/mender/public_html/css/load.php Jul 17 03:44:04 root maldet(11214): {quar} malware quarantined from '/home/mender/public_html/css/load.php' to '/usr/local/maldetect/quarantine/load.php.251013275' Jul 17 03:44:04 root maldet(11214): {scan} scan completed on : files 5940, malware hits 1, cleaned hits 0, time 22s Jul 17 03:44:04 root maldet(11214): {scan} scan report saved, to view run: maldet --report 220717-0343.11214 Jul 18 03:46:06 root maldet(14553): {update} checking for available updates... Jul 18 03:46:06 root maldet(14553): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 18 03:46:06 root maldet(14553): {update} hashing install files and checking against server... Jul 18 03:46:06 root maldet(14553): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 18 03:46:06 root maldet(14553): {update} latest version already installed. Jul 18 03:46:06 root maldet(14700): {sigup} performing signature update check... Jul 18 03:46:06 root maldet(14700): {sigup} local signature set is version 202207132220497 Jul 18 03:46:07 root maldet(14700): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 18 03:46:07 root maldet(14700): {sigup} latest signature set already installed Jul 18 03:46:07 root maldet(14827): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 18 03:46:07 root maldet(14827): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 18 03:46:07 root maldet(14827): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 18 03:46:07 root maldet(14827): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 18 03:46:07 root maldet(14827): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 18 03:46:19 root maldet(14827): {scan} file list completed in 12s, found 55135 files... Jul 18 03:46:19 root maldet(14827): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 18 03:46:19 root maldet(14827): {scan} scan of (55135 files) in progress... Jul 18 03:47:19 root maldet(14827): {scan} scan completed on : files 55135, malware hits 0, cleaned hits 0, time 72s Jul 18 03:47:19 root maldet(14827): {scan} scan report saved, to view run: maldet --report 220718-0346.14827 Jul 19 03:35:43 root maldet(5444): {update} checking for available updates... Jul 19 03:35:44 root maldet(5444): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 19 03:35:44 root maldet(5444): {update} hashing install files and checking against server... Jul 19 03:35:44 root maldet(5444): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 19 03:35:44 root maldet(5444): {update} latest version already installed. Jul 19 03:35:44 root maldet(5581): {sigup} performing signature update check... Jul 19 03:35:44 root maldet(5581): {sigup} local signature set is version 202207132220497 Jul 19 03:35:45 root maldet(5581): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 19 03:35:45 root maldet(5581): {sigup} latest signature set already installed Jul 19 03:35:45 root maldet(5696): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 19 03:35:45 root maldet(5696): {scan} signatures loaded: 17272 (14450 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 19 03:35:45 root maldet(5696): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 19 03:35:45 root maldet(5696): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 19 03:35:45 root maldet(5696): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 19 03:35:53 root maldet(5696): {scan} file list completed in 8s, found 27607 files... Jul 19 03:35:53 root maldet(5696): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 19 03:35:53 root maldet(5696): {scan} scan of (27607 files) in progress... Jul 19 03:36:28 root maldet(5696): {scan} scan completed on : files 27607, malware hits 0, cleaned hits 0, time 43s Jul 19 03:36:28 root maldet(5696): {scan} scan report saved, to view run: maldet --report 220719-0335.5696 Jul 20 03:52:19 root maldet(26971): {update} checking for available updates... Jul 20 03:52:20 root maldet(26971): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 20 03:52:20 root maldet(26971): {update} hashing install files and checking against server... Jul 20 03:52:20 root maldet(26971): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 20 03:52:20 root maldet(26971): {update} latest version already installed. Jul 20 03:52:20 root maldet(27117): {sigup} performing signature update check... Jul 20 03:52:20 root maldet(27117): {sigup} local signature set is version 202207132220497 Jul 20 03:52:21 root maldet(27117): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 20 03:52:21 root maldet(27117): {sigup} new signature set 20220719477956 available Jul 20 03:52:21 root maldet(27117): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 20 03:52:21 root maldet(27117): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 20 03:52:22 root maldet(27117): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 20 03:52:22 root maldet(27117): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 20 03:52:22 root maldet(27117): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 20 03:52:22 root maldet(27117): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 20 03:52:22 root maldet(27117): {sigup} verified md5sum of maldet-sigpack.tgz Jul 20 03:52:23 root maldet(27117): {sigup} unpacked and installed maldet-sigpack.tgz Jul 20 03:52:23 root maldet(27117): {sigup} verified md5sum of maldet-clean.tgz Jul 20 03:52:23 root maldet(27117): {sigup} unpacked and installed maldet-clean.tgz Jul 20 03:52:23 root maldet(27117): {sigup} signature set update completed Jul 20 03:52:23 root maldet(27117): {sigup} 17273 signatures (14451 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 20 03:52:23 root maldet(27370): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 20 03:52:23 root maldet(27370): {scan} signatures loaded: 17273 (14451 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 20 03:52:23 root maldet(27370): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 20 03:52:23 root maldet(27370): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 20 03:52:23 root maldet(27370): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 20 03:52:31 root maldet(27370): {scan} file list completed in 8s, found 117690 files... Jul 20 03:52:31 root maldet(27370): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 20 03:52:31 root maldet(27370): {scan} scan of (117690 files) in progress... Jul 20 03:55:47 root maldet(27370): {scan} scan completed on : files 117690, malware hits 0, cleaned hits 0, time 204s Jul 20 03:55:47 root maldet(27370): {scan} scan report saved, to view run: maldet --report 220720-0352.27370 Jul 21 03:12:40 root maldet(5134): {update} checking for available updates... Jul 21 03:12:41 root maldet(5134): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 21 03:12:41 root maldet(5134): {update} hashing install files and checking against server... Jul 21 03:12:41 root maldet(5134): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 21 03:12:41 root maldet(5134): {update} latest version already installed. Jul 21 03:12:41 root maldet(5274): {sigup} performing signature update check... Jul 21 03:12:41 root maldet(5274): {sigup} local signature set is version 20220719477956 Jul 21 03:12:42 root maldet(5274): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 21 03:12:42 root maldet(5274): {sigup} latest signature set already installed Jul 21 03:12:42 root maldet(5390): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 21 03:12:42 root maldet(5390): {scan} signatures loaded: 17273 (14451 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 21 03:12:42 root maldet(5390): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 21 03:12:42 root maldet(5390): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 21 03:12:42 root maldet(5390): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 21 03:12:50 root maldet(5390): {scan} file list completed in 8s, found 40857 files... Jul 21 03:12:50 root maldet(5390): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 21 03:12:50 root maldet(5390): {scan} scan of (40857 files) in progress... Jul 21 03:13:41 root maldet(5390): {scan} scan completed on : files 40857, malware hits 0, cleaned hits 0, time 59s Jul 21 03:13:41 root maldet(5390): {scan} scan report saved, to view run: maldet --report 220721-0312.5390 Jul 22 03:35:54 root maldet(6546): {update} checking for available updates... Jul 22 03:35:54 root maldet(6546): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 22 03:35:54 root maldet(6546): {update} hashing install files and checking against server... Jul 22 03:35:54 root maldet(6546): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 22 03:35:54 root maldet(6546): {update} latest version already installed. Jul 22 03:35:54 root maldet(6685): {sigup} performing signature update check... Jul 22 03:35:54 root maldet(6685): {sigup} local signature set is version 20220719477956 Jul 22 03:35:55 root maldet(6685): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 22 03:35:55 root maldet(6685): {sigup} latest signature set already installed Jul 22 03:35:55 root maldet(6804): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 22 03:35:55 root maldet(6804): {scan} signatures loaded: 17273 (14451 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 22 03:35:55 root maldet(6804): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 22 03:35:55 root maldet(6804): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 22 03:35:55 root maldet(6804): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 22 03:36:03 root maldet(6804): {scan} file list completed in 8s, found 86278 files... Jul 22 03:36:03 root maldet(6804): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 22 03:36:03 root maldet(6804): {scan} scan of (86278 files) in progress... Jul 22 03:38:13 root maldet(6804): {scan} scan completed on : files 86278, malware hits 0, cleaned hits 0, time 138s Jul 22 03:38:13 root maldet(6804): {scan} scan report saved, to view run: maldet --report 220722-0335.6804 Jul 23 03:59:50 root maldet(25669): {update} checking for available updates... Jul 23 03:59:51 root maldet(25669): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 23 03:59:51 root maldet(25669): {update} hashing install files and checking against server... Jul 23 03:59:51 root maldet(25669): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 23 03:59:51 root maldet(25669): {update} latest version already installed. Jul 23 03:59:51 root maldet(25810): {sigup} performing signature update check... Jul 23 03:59:51 root maldet(25810): {sigup} local signature set is version 20220719477956 Jul 23 03:59:52 root maldet(25810): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 23 03:59:52 root maldet(25810): {sigup} new signature set 202207221152944 available Jul 23 03:59:52 root maldet(25810): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 23 03:59:52 root maldet(25810): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 23 03:59:53 root maldet(25810): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 23 03:59:53 root maldet(25810): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 23 03:59:53 root maldet(25810): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 23 03:59:53 root maldet(25810): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 23 03:59:53 root maldet(25810): {sigup} verified md5sum of maldet-sigpack.tgz Jul 23 03:59:53 root maldet(25810): {sigup} unpacked and installed maldet-sigpack.tgz Jul 23 03:59:53 root maldet(25810): {sigup} verified md5sum of maldet-clean.tgz Jul 23 03:59:53 root maldet(25810): {sigup} unpacked and installed maldet-clean.tgz Jul 23 03:59:53 root maldet(25810): {sigup} signature set update completed Jul 23 03:59:53 root maldet(25810): {sigup} 17273 signatures (14451 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 23 03:59:53 root maldet(26071): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 23 03:59:54 root maldet(26071): {scan} signatures loaded: 17273 (14451 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 23 03:59:54 root maldet(26071): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 23 03:59:54 root maldet(26071): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 23 03:59:54 root maldet(26071): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 23 04:00:02 root maldet(26071): {scan} file list completed in 8s, found 55120 files... Jul 23 04:00:02 root maldet(26071): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 23 04:00:02 root maldet(26071): {scan} scan of (55120 files) in progress... Jul 23 04:03:01 root maldet(26071): {scan} scan completed on : files 55120, malware hits 0, cleaned hits 0, time 188s Jul 23 04:03:01 root maldet(26071): {scan} scan report saved, to view run: maldet --report 220723-0359.26071 Jul 24 03:36:39 root maldet(428): {update} checking for available updates... Jul 24 03:36:39 root maldet(428): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 24 03:36:39 root maldet(428): {update} hashing install files and checking against server... Jul 24 03:36:40 root maldet(428): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 24 03:36:40 root maldet(428): {update} latest version already installed. Jul 24 03:36:40 root maldet(641): {sigup} performing signature update check... Jul 24 03:36:40 root maldet(641): {sigup} local signature set is version 202207221152944 Jul 24 03:36:41 root maldet(641): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 24 03:36:41 root maldet(641): {sigup} latest signature set already installed Jul 24 03:36:41 root maldet(770): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 24 03:36:42 root maldet(770): {scan} signatures loaded: 17273 (14451 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 24 03:36:42 root maldet(770): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 24 03:36:42 root maldet(770): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 24 03:36:42 root maldet(770): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 24 03:36:49 root maldet(770): {scan} file list completed in 7s, found 159 files... Jul 24 03:36:49 root maldet(770): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 24 03:36:49 root maldet(770): {scan} scan of (159 files) in progress... Jul 24 03:36:56 root maldet(770): {scan} scan completed on : files 159, malware hits 0, cleaned hits 0, time 15s Jul 24 03:36:56 root maldet(770): {scan} scan report saved, to view run: maldet --report 220724-0336.770 Jul 25 03:40:32 root maldet(20642): {update} checking for available updates... Jul 25 03:40:32 root maldet(20642): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 25 03:40:32 root maldet(20642): {update} hashing install files and checking against server... Jul 25 03:40:32 root maldet(20642): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 25 03:40:32 root maldet(20642): {update} latest version already installed. Jul 25 03:40:32 root maldet(20780): {sigup} performing signature update check... Jul 25 03:40:32 root maldet(20780): {sigup} local signature set is version 202207221152944 Jul 25 03:40:33 root maldet(20780): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 25 03:40:33 root maldet(20780): {sigup} latest signature set already installed Jul 25 03:40:33 root maldet(20892): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 25 03:40:33 root maldet(20892): {scan} signatures loaded: 17273 (14451 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 25 03:40:33 root maldet(20892): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 25 03:40:33 root maldet(20892): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 25 03:40:33 root maldet(20892): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 25 03:40:41 root maldet(20892): {scan} file list completed in 8s, found 29412 files... Jul 25 03:40:41 root maldet(20892): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 25 03:40:41 root maldet(20892): {scan} scan of (29412 files) in progress... Jul 25 03:41:14 root maldet(20892): {scan} scan completed on : files 29412, malware hits 0, cleaned hits 0, time 41s Jul 25 03:41:14 root maldet(20892): {scan} scan report saved, to view run: maldet --report 220725-0340.20892 Jul 26 03:29:18 root maldet(30137): {update} checking for available updates... Jul 26 03:29:18 root maldet(30137): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 26 03:29:18 root maldet(30137): {update} hashing install files and checking against server... Jul 26 03:29:19 root maldet(30137): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 26 03:29:19 root maldet(30137): {update} latest version already installed. Jul 26 03:29:19 root maldet(30289): {sigup} performing signature update check... Jul 26 03:29:19 root maldet(30289): {sigup} local signature set is version 202207221152944 Jul 26 03:29:19 root maldet(30289): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 26 03:29:19 root maldet(30289): {sigup} new signature set 202207251827959 available Jul 26 03:29:19 root maldet(30289): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 26 03:29:20 root maldet(30289): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 26 03:29:20 root maldet(30289): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 26 03:29:20 root maldet(30289): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 26 03:29:20 root maldet(30289): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 26 03:29:21 root maldet(30289): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 26 03:29:21 root maldet(30289): {sigup} verified md5sum of maldet-sigpack.tgz Jul 26 03:29:21 root maldet(30289): {sigup} unpacked and installed maldet-sigpack.tgz Jul 26 03:29:21 root maldet(30289): {sigup} verified md5sum of maldet-clean.tgz Jul 26 03:29:21 root maldet(30289): {sigup} unpacked and installed maldet-clean.tgz Jul 26 03:29:21 root maldet(30289): {sigup} signature set update completed Jul 26 03:29:21 root maldet(30289): {sigup} 17273 signatures (14451 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 26 03:29:22 root maldet(30552): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 26 03:29:22 root maldet(30552): {scan} signatures loaded: 17273 (14451 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 26 03:29:22 root maldet(30552): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 26 03:29:22 root maldet(30552): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 26 03:29:22 root maldet(30552): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 26 03:29:30 root maldet(30552): {scan} file list completed in 8s, found 29480 files... Jul 26 03:29:30 root maldet(30552): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 26 03:29:30 root maldet(30552): {scan} scan of (29480 files) in progress... Jul 26 03:30:48 root maldet(30552): {scan} scan completed on : files 29480, malware hits 0, cleaned hits 0, time 86s Jul 26 03:30:48 root maldet(30552): {scan} scan report saved, to view run: maldet --report 220726-0329.30552 Jul 27 03:39:42 root maldet(30130): {update} checking for available updates... Jul 27 03:39:42 root maldet(30130): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 27 03:39:42 root maldet(30130): {update} hashing install files and checking against server... Jul 27 03:39:43 root maldet(30130): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 27 03:39:43 root maldet(30130): {update} latest version already installed. Jul 27 03:39:43 root maldet(30268): {sigup} performing signature update check... Jul 27 03:39:43 root maldet(30268): {sigup} local signature set is version 202207251827959 Jul 27 03:39:43 root maldet(30268): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 27 03:39:43 root maldet(30268): {sigup} latest signature set already installed Jul 27 03:39:43 root maldet(30382): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 27 03:39:44 root maldet(30382): {scan} signatures loaded: 17273 (14451 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 27 03:39:44 root maldet(30382): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 27 03:39:44 root maldet(30382): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 27 03:39:44 root maldet(30382): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 27 03:39:52 root maldet(30382): {scan} file list completed in 8s, found 35344 files... Jul 27 03:39:52 root maldet(30382): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 27 03:39:52 root maldet(30382): {scan} scan of (35344 files) in progress... Jul 27 03:41:07 root maldet(30382): {scan} scan completed on : files 35344, malware hits 0, cleaned hits 0, time 84s Jul 27 03:41:07 root maldet(30382): {scan} scan report saved, to view run: maldet --report 220727-0339.30382 Jul 28 03:11:46 root maldet(7625): {update} checking for available updates... Jul 28 03:11:47 root maldet(7625): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 28 03:11:47 root maldet(7625): {update} hashing install files and checking against server... Jul 28 03:11:47 root maldet(7625): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 28 03:11:47 root maldet(7625): {update} latest version already installed. Jul 28 03:11:47 root maldet(7764): {sigup} performing signature update check... Jul 28 03:11:47 root maldet(7764): {sigup} local signature set is version 202207251827959 Jul 28 03:11:47 root maldet(7764): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 28 03:11:47 root maldet(7764): {sigup} latest signature set already installed Jul 28 03:11:48 root maldet(7881): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 28 03:11:48 root maldet(7881): {scan} signatures loaded: 17273 (14451 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 28 03:11:48 root maldet(7881): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 28 03:11:48 root maldet(7881): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 28 03:11:48 root maldet(7881): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 28 03:11:56 root maldet(7881): {scan} file list completed in 8s, found 84594 files... Jul 28 03:11:56 root maldet(7881): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 28 03:11:56 root maldet(7881): {scan} scan of (84594 files) in progress... Jul 28 03:14:03 root maldet(7881): {scan} scan completed on : files 84594, malware hits 0, cleaned hits 0, time 135s Jul 28 03:14:03 root maldet(7881): {scan} scan report saved, to view run: maldet --report 220728-0311.7881 Jul 29 03:55:33 root maldet(26937): {update} checking for available updates... Jul 29 03:55:33 root maldet(26937): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 29 03:55:34 root maldet(26937): {update} hashing install files and checking against server... Jul 29 03:55:34 root maldet(26937): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 29 03:55:34 root maldet(26937): {update} latest version already installed. Jul 29 03:55:34 root maldet(27103): {sigup} performing signature update check... Jul 29 03:55:34 root maldet(27103): {sigup} local signature set is version 202207251827959 Jul 29 03:55:34 root maldet(27103): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 29 03:55:34 root maldet(27103): {sigup} new signature set 202207282502928 available Jul 29 03:55:34 root maldet(27103): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 29 03:55:35 root maldet(27103): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 29 03:55:35 root maldet(27103): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 29 03:55:35 root maldet(27103): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 29 03:55:35 root maldet(27103): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 29 03:55:36 root maldet(27103): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 29 03:55:36 root maldet(27103): {sigup} verified md5sum of maldet-sigpack.tgz Jul 29 03:55:36 root maldet(27103): {sigup} unpacked and installed maldet-sigpack.tgz Jul 29 03:55:36 root maldet(27103): {sigup} verified md5sum of maldet-clean.tgz Jul 29 03:55:36 root maldet(27103): {sigup} unpacked and installed maldet-clean.tgz Jul 29 03:55:36 root maldet(27103): {sigup} signature set update completed Jul 29 03:55:36 root maldet(27103): {sigup} 17273 signatures (14451 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 29 03:55:36 root maldet(27394): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 29 03:55:36 root maldet(27394): {scan} signatures loaded: 17273 (14451 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 29 03:55:36 root maldet(27394): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 29 03:55:36 root maldet(27394): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 29 03:55:36 root maldet(27394): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 29 03:55:46 root maldet(27394): {scan} file list completed in 10s, found 33481 files... Jul 29 03:55:46 root maldet(27394): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 29 03:55:46 root maldet(27394): {scan} scan of (33481 files) in progress... Jul 29 03:56:31 root maldet(27394): {scan} scan completed on : files 33481, malware hits 0, cleaned hits 0, time 54s Jul 29 03:56:31 root maldet(27394): {scan} scan report saved, to view run: maldet --report 220729-0355.27394 Jul 30 03:44:57 root maldet(6470): {update} checking for available updates... Jul 30 03:44:58 root maldet(6470): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 30 03:44:58 root maldet(6470): {update} hashing install files and checking against server... Jul 30 03:44:58 root maldet(6470): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 30 03:44:58 root maldet(6470): {update} latest version already installed. Jul 30 03:44:58 root maldet(6616): {sigup} performing signature update check... Jul 30 03:44:58 root maldet(6616): {sigup} local signature set is version 202207282502928 Jul 30 03:44:59 root maldet(6616): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 30 03:44:59 root maldet(6616): {sigup} latest signature set already installed Jul 30 03:44:59 root maldet(6735): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 30 03:44:59 root maldet(6735): {scan} signatures loaded: 17273 (14451 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 30 03:44:59 root maldet(6735): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 30 03:44:59 root maldet(6735): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 30 03:44:59 root maldet(6735): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 30 03:45:12 root maldet(6735): {scan} file list completed in 13s, found 27664 files... Jul 30 03:45:12 root maldet(6735): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 30 03:45:12 root maldet(6735): {scan} scan of (27664 files) in progress... Jul 30 03:45:56 root maldet(6735): {scan} scan completed on : files 27664, malware hits 0, cleaned hits 0, time 57s Jul 30 03:45:56 root maldet(6735): {scan} scan report saved, to view run: maldet --report 220730-0344.6735 Jul 31 03:51:03 root maldet(22929): {update} checking for available updates... Jul 31 03:51:04 root maldet(22929): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 31 03:51:04 root maldet(22929): {update} hashing install files and checking against server... Jul 31 03:51:04 root maldet(22929): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 31 03:51:04 root maldet(22929): {update} latest version already installed. Jul 31 03:51:04 root maldet(23118): {sigup} performing signature update check... Jul 31 03:51:04 root maldet(23118): {sigup} local signature set is version 202207282502928 Jul 31 03:51:05 root maldet(23118): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 31 03:51:05 root maldet(23118): {sigup} latest signature set already installed Jul 31 03:51:05 root maldet(23247): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 31 03:51:06 root maldet(23247): {scan} signatures loaded: 17273 (14451 MD5 | 2039 HEX | 783 YARA | 0 USER) Jul 31 03:51:06 root maldet(23247): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jul 31 03:51:06 root maldet(23247): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 31 03:51:07 root maldet(23247): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 31 03:51:33 root maldet(23247): {scan} file list completed in 27s, found 27636 files... Jul 31 03:51:33 root maldet(23247): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 31 03:51:33 root maldet(23247): {scan} scan of (27636 files) in progress... Jul 31 03:54:04 root maldet(23247): {scan} scan completed on : files 27636, malware hits 0, cleaned hits 0, time 179s Jul 31 03:54:04 root maldet(23247): {scan} scan report saved, to view run: maldet --report 220731-0351.23247 Aug 01 03:16:44 root maldet(10427): {update} checking for available updates... Aug 01 03:16:45 root maldet(10427): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 01 03:16:45 root maldet(10427): {update} hashing install files and checking against server... Aug 01 03:16:47 root maldet(10427): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 01 03:16:47 root maldet(10427): {update} latest version already installed. Aug 01 03:16:47 root maldet(11374): {sigup} performing signature update check... Aug 01 03:16:47 root maldet(11374): {sigup} local signature set is version 202207282502928 Aug 01 03:16:48 root maldet(11374): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 01 03:16:48 root maldet(11374): {sigup} new signature set 202207313178066 available Aug 01 03:16:48 root maldet(11374): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 01 03:16:49 root maldet(11374): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 01 03:16:50 root maldet(11374): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Aug 01 03:16:50 root maldet(11374): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 01 03:16:51 root maldet(11374): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 01 03:16:52 root maldet(11374): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Aug 01 03:16:52 root maldet(11374): {sigup} verified md5sum of maldet-sigpack.tgz Aug 01 03:16:53 root maldet(11374): {sigup} unpacked and installed maldet-sigpack.tgz Aug 01 03:16:54 root maldet(11374): {sigup} verified md5sum of maldet-clean.tgz Aug 01 03:16:54 root maldet(11374): {sigup} unpacked and installed maldet-clean.tgz Aug 01 03:16:54 root maldet(11374): {sigup} signature set update completed Aug 01 03:16:55 root maldet(11374): {sigup} 17273 signatures (14451 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 01 03:16:57 root maldet(13146): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 01 03:16:59 root maldet(13146): {scan} signatures loaded: 17273 (14451 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 01 03:17:00 root maldet(13146): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 01 03:17:00 root maldet(13146): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 01 03:17:00 root maldet(13146): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 01 03:18:39 root maldet(13146): {scan} file list completed in 99s, found 27635 files... Aug 01 03:18:39 root maldet(13146): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 01 03:18:39 root maldet(13146): {scan} scan of (27635 files) in progress... Aug 01 03:20:45 root maldet(13146): {scan} scan completed on : files 27635, malware hits 0, cleaned hits 0, time 227s Aug 01 03:20:45 root maldet(13146): {scan} scan report saved, to view run: maldet --report 220801-0316.13146 Aug 02 03:34:59 root maldet(26855): {update} checking for available updates... Aug 02 03:35:00 root maldet(26855): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 02 03:35:01 root maldet(26855): {update} hashing install files and checking against server... Aug 02 03:35:02 root maldet(26855): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 02 03:35:02 root maldet(26855): {update} latest version already installed. Aug 02 03:35:02 root maldet(27389): {sigup} performing signature update check... Aug 02 03:35:02 root maldet(27389): {sigup} local signature set is version 202207313178066 Aug 02 03:35:03 root maldet(27389): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 02 03:35:04 root maldet(27389): {sigup} new signature set 202208013810291 available Aug 02 03:35:04 root maldet(27389): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 02 03:35:05 root maldet(27389): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 02 03:35:06 root maldet(27389): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Aug 02 03:35:07 root maldet(27389): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 02 03:35:08 root maldet(27389): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 02 03:35:09 root maldet(27389): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Aug 02 03:35:09 root maldet(27389): {sigup} verified md5sum of maldet-sigpack.tgz Aug 02 03:35:11 root maldet(27389): {sigup} unpacked and installed maldet-sigpack.tgz Aug 02 03:35:12 root maldet(27389): {sigup} verified md5sum of maldet-clean.tgz Aug 02 03:35:12 root maldet(27389): {sigup} unpacked and installed maldet-clean.tgz Aug 02 03:35:12 root maldet(27389): {sigup} signature set update completed Aug 02 03:35:12 root maldet(27389): {sigup} 17273 signatures (14451 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 02 03:35:14 root maldet(27860): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 02 03:35:16 root maldet(27860): {scan} signatures loaded: 17273 (14451 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 02 03:35:16 root maldet(27860): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 02 03:35:16 root maldet(27860): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 02 03:35:16 root maldet(27860): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 02 03:38:05 root maldet(27860): {scan} file list completed in 169s, found 27625 files... Aug 02 03:38:05 root maldet(27860): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 02 03:38:05 root maldet(27860): {scan} scan of (27625 files) in progress... Aug 02 03:40:58 root maldet(27860): {scan} scan completed on : files 27625, malware hits 0, cleaned hits 0, time 344s Aug 02 03:40:58 root maldet(27860): {scan} scan report saved, to view run: maldet --report 220802-0335.27860 Aug 03 03:19:58 root maldet(7393): {update} checking for available updates... Aug 03 03:19:59 root maldet(7393): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 03 03:20:00 root maldet(7393): {update} hashing install files and checking against server... Aug 03 03:20:02 root maldet(7393): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 03 03:20:02 root maldet(7393): {update} latest version already installed. Aug 03 03:20:02 root maldet(8417): {sigup} performing signature update check... Aug 03 03:20:02 root maldet(8417): {sigup} local signature set is version 202208013810291 Aug 03 03:20:03 root maldet(8417): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 03 03:20:04 root maldet(8417): {sigup} latest signature set already installed Aug 03 03:20:06 root maldet(8909): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 03 03:20:08 root maldet(8909): {scan} signatures loaded: 17273 (14451 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 03 03:20:09 root maldet(8909): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 03 03:20:09 root maldet(8909): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 03 03:20:09 root maldet(8909): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 03 03:32:57 root maldet(8909): {scan} file list completed in 768s, found 422 files... Aug 03 03:32:57 root maldet(8909): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 03 03:32:57 root maldet(8909): {scan} scan of (422 files) in progress... Aug 03 03:33:44 root maldet(8909): {scan} scan completed on : files 422, malware hits 0, cleaned hits 0, time 817s Aug 03 03:33:44 root maldet(8909): {scan} scan report saved, to view run: maldet --report 220803-0320.8909 Aug 04 03:33:30 root maldet(24368): {update} checking for available updates... Aug 04 03:33:33 root maldet(24368): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 04 03:33:33 root maldet(24368): {update} hashing install files and checking against server... Aug 04 03:33:34 root maldet(24368): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 04 03:33:35 root maldet(24368): {update} latest version already installed. Aug 04 03:33:37 root maldet(24924): {sigup} performing signature update check... Aug 04 03:33:37 root maldet(24924): {sigup} local signature set is version 202208013810291 Aug 04 03:33:39 root maldet(24924): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 04 03:33:39 root maldet(24924): {sigup} latest signature set already installed Aug 04 03:33:42 root maldet(25371): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 04 03:33:49 root maldet(25371): {scan} signatures loaded: 17273 (14451 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 04 03:33:49 root maldet(25371): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 04 03:33:49 root maldet(25371): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 04 03:33:49 root maldet(25371): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 04 03:52:22 root maldet(25371): {scan} file list completed in 1113s, found 110271 files... Aug 04 03:52:22 root maldet(25371): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 04 03:52:22 root maldet(25371): {scan} scan of (110271 files) in progress... Aug 04 04:10:38 root maldet(25371): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Aug 04 04:10:39 root maldet(25371): {scan} scan completed on : files 110271, malware hits 0, cleaned hits 0, time 2216s Aug 04 04:10:39 root maldet(25371): {scan} scan report saved, to view run: maldet --report 220804-0333.25371 Aug 05 04:00:15 root maldet(18659): {update} checking for available updates... Aug 05 04:00:17 root maldet(18659): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 05 04:00:17 root maldet(18659): {update} hashing install files and checking against server... Aug 05 04:00:19 root maldet(18659): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 05 04:00:19 root maldet(18659): {update} latest version already installed. Aug 05 04:00:21 root maldet(18847): {sigup} performing signature update check... Aug 05 04:00:21 root maldet(18847): {sigup} local signature set is version 202208013810291 Aug 05 04:00:22 root maldet(18847): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 05 04:00:23 root maldet(18847): {sigup} new signature set 20220804520343 available Aug 05 04:00:23 root maldet(18847): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 05 04:00:24 root maldet(18847): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 05 04:00:26 root maldet(18847): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Aug 05 04:00:26 root maldet(18847): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 05 04:00:28 root maldet(18847): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 05 04:00:30 root maldet(18847): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Aug 05 04:00:30 root maldet(18847): {sigup} verified md5sum of maldet-sigpack.tgz Aug 05 04:00:31 root maldet(18847): {sigup} unpacked and installed maldet-sigpack.tgz Aug 05 04:00:32 root maldet(18847): {sigup} verified md5sum of maldet-clean.tgz Aug 05 04:00:32 root maldet(18847): {sigup} unpacked and installed maldet-clean.tgz Aug 05 04:00:32 root maldet(18847): {sigup} signature set update completed Aug 05 04:00:33 root maldet(18847): {sigup} 17273 signatures (14451 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 05 04:00:36 root maldet(19226): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 05 04:00:43 root maldet(19226): {scan} signatures loaded: 17273 (14451 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 05 04:00:43 root maldet(19226): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 05 04:00:43 root maldet(19226): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 05 04:00:44 root maldet(19226): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 05 04:21:28 root maldet(19226): {scan} file list completed in 1245s, found 56910 files... Aug 05 04:21:28 root maldet(19226): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 05 04:21:28 root maldet(19226): {scan} scan of (56910 files) in progress... Aug 05 04:30:01 root maldet(19226): {scan} scan completed on : files 56910, malware hits 0, cleaned hits 0, time 1764s Aug 05 04:30:01 root maldet(19226): {scan} scan report saved, to view run: maldet --report 220805-0400.19226 Aug 06 03:46:15 root maldet(6688): {update} checking for available updates... Aug 06 03:46:18 root maldet(6688): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 06 03:46:18 root maldet(6688): {update} hashing install files and checking against server... Aug 06 03:46:20 root maldet(6688): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 06 03:46:20 root maldet(6688): {update} latest version already installed. Aug 06 03:46:22 root maldet(6875): {sigup} performing signature update check... Aug 06 03:46:22 root maldet(6875): {sigup} local signature set is version 20220804520343 Aug 06 03:46:24 root maldet(6875): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 06 03:46:24 root maldet(6875): {sigup} latest signature set already installed Aug 06 03:46:27 root maldet(7014): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 06 03:46:29 root maldet(7014): {scan} signatures loaded: 17273 (14451 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 06 03:46:30 root maldet(7014): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 06 03:46:30 root maldet(7014): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 06 03:46:30 root maldet(7014): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 06 04:07:33 root maldet(7014): {scan} file list completed in 1263s, found 55190 files... Aug 06 04:07:33 root maldet(7014): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 06 04:07:34 root maldet(7014): {scan} scan of (55190 files) in progress... Aug 06 04:17:26 root maldet(7014): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Aug 06 04:17:26 root maldet(7014): {scan} scan completed on : files 55190, malware hits 0, cleaned hits 0, time 1859s Aug 06 04:17:26 root maldet(7014): {scan} scan report saved, to view run: maldet --report 220806-0346.7014 Aug 07 03:50:41 root maldet(26058): {update} checking for available updates... Aug 07 03:50:42 root maldet(26058): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 07 03:50:43 root maldet(26058): {update} hashing install files and checking against server... Aug 07 03:50:44 root maldet(26058): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 07 03:50:45 root maldet(26058): {update} latest version already installed. Aug 07 03:50:47 root maldet(26240): {sigup} performing signature update check... Aug 07 03:50:47 root maldet(26240): {sigup} local signature set is version 20220804520343 Aug 07 03:50:48 root maldet(26240): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 07 03:50:49 root maldet(26240): {sigup} latest signature set already installed Aug 07 03:50:51 root maldet(26379): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 07 03:50:58 root maldet(26379): {scan} signatures loaded: 17273 (14451 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 07 03:50:59 root maldet(26379): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 07 03:50:59 root maldet(26379): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 07 03:50:59 root maldet(26379): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 07 04:13:29 root maldet(26379): {scan} file list completed in 1350s, found 92415 files... Aug 07 04:13:30 root maldet(26379): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 07 04:13:30 root maldet(26379): {scan} scan of (92415 files) in progress... Aug 07 04:32:09 root maldet(26379): {scan} scan completed on : files 92415, malware hits 0, cleaned hits 0, time 2477s Aug 07 04:32:09 root maldet(26379): {scan} scan report saved, to view run: maldet --report 220807-0350.26379 Aug 08 03:29:32 root maldet(4763): {update} checking for available updates... Aug 08 03:29:33 root maldet(4763): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 08 03:29:34 root maldet(4763): {update} hashing install files and checking against server... Aug 08 03:29:35 root maldet(4763): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 08 03:29:35 root maldet(4763): {update} latest version already installed. Aug 08 03:29:38 root maldet(5526): {sigup} performing signature update check... Aug 08 03:29:38 root maldet(5526): {sigup} local signature set is version 20220804520343 Aug 08 03:29:40 root maldet(5526): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 08 03:29:40 root maldet(5526): {sigup} new signature set 202208071195688 available Aug 08 03:29:40 root maldet(5526): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 08 03:29:42 root maldet(5526): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 08 03:29:43 root maldet(5526): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Aug 08 03:29:44 root maldet(5526): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 08 03:29:45 root maldet(5526): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 08 03:29:46 root maldet(5526): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Aug 08 03:29:46 root maldet(5526): {sigup} verified md5sum of maldet-sigpack.tgz Aug 08 03:29:48 root maldet(5526): {sigup} unpacked and installed maldet-sigpack.tgz Aug 08 03:29:48 root maldet(5526): {sigup} verified md5sum of maldet-clean.tgz Aug 08 03:29:49 root maldet(5526): {sigup} unpacked and installed maldet-clean.tgz Aug 08 03:29:49 root maldet(5526): {sigup} signature set update completed Aug 08 03:29:49 root maldet(5526): {sigup} 17275 signatures (14453 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 08 03:29:51 root maldet(7256): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 08 03:29:59 root maldet(7256): {scan} signatures loaded: 17275 (14453 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 08 03:29:59 root maldet(7256): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 08 03:29:59 root maldet(7256): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 08 03:30:00 root maldet(7256): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 08 03:53:57 root maldet(7256): {scan} file list completed in 1438s, found 68355 files... Aug 08 03:53:57 root maldet(7256): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 08 03:53:57 root maldet(7256): {scan} scan of (68355 files) in progress... Aug 08 04:07:18 root maldet(7256): {scan} scan completed on : files 68355, malware hits 0, cleaned hits 0, time 2247s Aug 08 04:07:19 root maldet(7256): {scan} scan report saved, to view run: maldet --report 220808-0329.7256 Aug 09 03:20:59 root maldet(20367): {update} checking for available updates... Aug 09 03:21:01 root maldet(20367): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 09 03:21:01 root maldet(20367): {update} hashing install files and checking against server... Aug 09 03:21:03 root maldet(20367): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 09 03:21:03 root maldet(20367): {update} latest version already installed. Aug 09 03:21:05 root maldet(21014): {sigup} performing signature update check... Aug 09 03:21:05 root maldet(21014): {sigup} local signature set is version 202208071195688 Aug 09 03:21:07 root maldet(21014): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 09 03:21:08 root maldet(21014): {sigup} latest signature set already installed Aug 09 03:21:10 root maldet(21625): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 09 03:21:18 root maldet(21625): {scan} signatures loaded: 17275 (14453 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 09 03:21:18 root maldet(21625): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 09 03:21:18 root maldet(21625): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 09 03:21:18 root maldet(21625): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 09 03:45:10 root maldet(21625): {scan} file list completed in 1432s, found 39351 files... Aug 09 03:45:11 root maldet(21625): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 09 03:45:11 root maldet(21625): {scan} scan of (39351 files) in progress... Aug 09 03:53:01 root maldet(21625): {scan} scan completed on : files 39351, malware hits 0, cleaned hits 0, time 1911s Aug 09 03:53:01 root maldet(21625): {scan} scan report saved, to view run: maldet --report 220809-0321.21625 Aug 10 03:51:02 root maldet(29066): {update} checking for available updates... Aug 10 03:51:03 root maldet(29066): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 10 03:51:04 root maldet(29066): {update} hashing install files and checking against server... Aug 10 03:51:05 root maldet(29066): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 10 03:51:05 root maldet(29066): {update} latest version already installed. Aug 10 03:51:08 root maldet(29236): {sigup} performing signature update check... Aug 10 03:51:08 root maldet(29236): {sigup} local signature set is version 202208071195688 Aug 10 03:51:10 root maldet(29236): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 10 03:51:10 root maldet(29236): {sigup} latest signature set already installed Aug 10 03:51:13 root maldet(29378): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 10 03:51:20 root maldet(29378): {scan} signatures loaded: 17275 (14453 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 10 03:51:20 root maldet(29378): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 10 03:51:21 root maldet(29378): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 10 03:51:21 root maldet(29378): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 10 04:16:38 root maldet(29378): {scan} file list completed in 1517s, found 62815 files... Aug 10 04:16:38 root maldet(29378): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 10 04:16:39 root maldet(29378): {scan} scan of (62815 files) in progress... Aug 10 04:30:41 root maldet(29378): {scan} scan completed on : files 62815, malware hits 0, cleaned hits 0, time 2368s Aug 10 04:30:42 root maldet(29378): {scan} scan report saved, to view run: maldet --report 220810-0351.29378 Aug 11 04:01:07 root maldet(16608): {update} checking for available updates... Aug 11 04:01:09 root maldet(16608): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 11 04:01:10 root maldet(16608): {update} hashing install files and checking against server... Aug 11 04:01:11 root maldet(16608): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 11 04:01:12 root maldet(16608): {update} latest version already installed. Aug 11 04:01:14 root maldet(17232): {sigup} performing signature update check... Aug 11 04:01:14 root maldet(17232): {sigup} local signature set is version 202208071195688 Aug 11 04:01:16 root maldet(17232): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 11 04:01:16 root maldet(17232): {sigup} new signature set 20220810498353 available Aug 11 04:01:17 root maldet(17232): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 11 04:01:18 root maldet(17232): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 11 04:01:20 root maldet(17232): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Aug 11 04:01:20 root maldet(17232): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 11 04:01:21 root maldet(17232): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 11 04:01:23 root maldet(17232): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Aug 11 04:01:23 root maldet(17232): {sigup} verified md5sum of maldet-sigpack.tgz Aug 11 04:01:25 root maldet(17232): {sigup} unpacked and installed maldet-sigpack.tgz Aug 11 04:01:26 root maldet(17232): {sigup} verified md5sum of maldet-clean.tgz Aug 11 04:01:26 root maldet(17232): {sigup} unpacked and installed maldet-clean.tgz Aug 11 04:01:26 root maldet(17232): {sigup} signature set update completed Aug 11 04:01:27 root maldet(17232): {sigup} 17276 signatures (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 11 04:01:30 root maldet(18560): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 11 04:01:38 root maldet(18560): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 11 04:01:38 root maldet(18560): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 11 04:01:38 root maldet(18560): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 11 04:01:38 root maldet(18560): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 11 04:32:49 root maldet(18560): {scan} file list completed in 1871s, found 35794 files... Aug 11 04:32:49 root maldet(18560): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 11 04:32:49 root maldet(18560): {scan} scan of (35794 files) in progress... Aug 11 04:40:10 root maldet(18560): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Aug 11 04:40:11 root maldet(18560): {scan} scan completed on : files 35794, malware hits 0, cleaned hits 0, time 2320s Aug 11 04:40:11 root maldet(18560): {scan} scan report saved, to view run: maldet --report 220811-0401.18560 Aug 12 03:53:43 root maldet(17330): {update} checking for available updates... Aug 12 03:53:45 root maldet(17330): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 12 03:53:45 root maldet(17330): {update} hashing install files and checking against server... Aug 12 03:53:46 root maldet(17330): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 12 03:53:47 root maldet(17330): {update} latest version already installed. Aug 12 03:53:49 root maldet(17571): {sigup} performing signature update check... Aug 12 03:53:49 root maldet(17571): {sigup} local signature set is version 20220810498353 Aug 12 03:53:51 root maldet(17571): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 12 03:53:51 root maldet(17571): {sigup} latest signature set already installed Aug 12 03:53:54 root maldet(17820): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 12 03:53:56 root maldet(17820): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 12 03:53:56 root maldet(17820): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 12 03:53:56 root maldet(17820): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 12 03:53:56 root maldet(17820): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 12 04:18:50 root maldet(17820): {scan} file list completed in 1494s, found 91 files... Aug 12 04:18:51 root maldet(17820): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 12 04:18:51 root maldet(17820): {scan} scan of (91 files) in progress... Aug 12 04:19:31 root maldet(17820): {scan} scan completed on : files 91, malware hits 0, cleaned hits 0, time 1537s Aug 12 04:19:31 root maldet(17820): {scan} scan report saved, to view run: maldet --report 220812-0353.17820 Aug 13 03:42:45 root maldet(12398): {update} checking for available updates... Aug 13 03:42:46 root maldet(12398): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 13 03:42:47 root maldet(12398): {update} hashing install files and checking against server... Aug 13 03:42:48 root maldet(12398): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 13 03:42:48 root maldet(12398): {update} latest version already installed. Aug 13 03:42:51 root maldet(12623): {sigup} performing signature update check... Aug 13 03:42:51 root maldet(12623): {sigup} local signature set is version 20220810498353 Aug 13 03:42:53 root maldet(12623): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 13 03:42:53 root maldet(12623): {sigup} latest signature set already installed Aug 13 03:42:56 root maldet(12797): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 13 03:43:03 root maldet(12797): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 13 03:43:03 root maldet(12797): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 13 03:43:04 root maldet(12797): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 13 03:43:04 root maldet(12797): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 13 04:07:51 root maldet(12797): {scan} file list completed in 1486s, found 29436 files... Aug 13 04:07:51 root maldet(12797): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 13 04:07:51 root maldet(12797): {scan} scan of (29436 files) in progress... Aug 13 04:14:00 root maldet(12797): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Aug 13 04:14:01 root maldet(12797): {scan} scan completed on : files 29436, malware hits 0, cleaned hits 0, time 1865s Aug 13 04:14:01 root maldet(12797): {scan} scan report saved, to view run: maldet --report 220813-0342.12797 Aug 14 03:49:59 root maldet(19191): {update} checking for available updates... Aug 14 03:50:01 root maldet(19191): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 14 03:50:01 root maldet(19191): {update} hashing install files and checking against server... Aug 14 03:50:03 root maldet(19191): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 14 03:50:04 root maldet(19191): {update} latest version already installed. Aug 14 03:50:06 root maldet(19828): {sigup} performing signature update check... Aug 14 03:50:07 root maldet(19828): {sigup} local signature set is version 20220810498353 Aug 14 03:50:08 root maldet(19828): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 14 03:50:09 root maldet(19828): {sigup} new signature set 20220813479479 available Aug 14 03:50:09 root maldet(19828): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 14 03:50:10 root maldet(19828): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 14 03:50:12 root maldet(19828): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Aug 14 03:50:12 root maldet(19828): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 14 03:50:14 root maldet(19828): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 14 03:50:15 root maldet(19828): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Aug 14 03:50:16 root maldet(19828): {sigup} verified md5sum of maldet-sigpack.tgz Aug 14 03:50:17 root maldet(19828): {sigup} unpacked and installed maldet-sigpack.tgz Aug 14 03:50:18 root maldet(19828): {sigup} verified md5sum of maldet-clean.tgz Aug 14 03:50:18 root maldet(19828): {sigup} unpacked and installed maldet-clean.tgz Aug 14 03:50:18 root maldet(19828): {sigup} signature set update completed Aug 14 03:50:19 root maldet(19828): {sigup} 17276 signatures (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 14 03:50:23 root maldet(20627): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 14 03:50:31 root maldet(20627): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 14 03:50:31 root maldet(20627): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 14 03:50:31 root maldet(20627): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 14 03:50:31 root maldet(20627): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 14 04:17:01 root maldet(20627): {scan} file list completed in 1589s, found 37312 files... Aug 14 04:17:01 root maldet(20627): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 14 04:17:01 root maldet(20627): {scan} scan of (37312 files) in progress... Aug 14 04:26:17 root maldet(20627): {scan} scan completed on : files 37312, malware hits 0, cleaned hits 0, time 2153s Aug 14 04:26:17 root maldet(20627): {scan} scan report saved, to view run: maldet --report 220814-0350.20627 Aug 15 03:44:44 root maldet(28688): {update} checking for available updates... Aug 15 03:44:45 root maldet(28688): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 15 03:44:46 root maldet(28688): {update} hashing install files and checking against server... Aug 15 03:44:48 root maldet(28688): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 15 03:44:48 root maldet(28688): {update} latest version already installed. Aug 15 03:44:50 root maldet(28872): {sigup} performing signature update check... Aug 15 03:44:50 root maldet(28872): {sigup} local signature set is version 20220813479479 Aug 15 03:44:52 root maldet(28872): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 15 03:44:52 root maldet(28872): {sigup} latest signature set already installed Aug 15 03:44:55 root maldet(29055): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 15 03:45:03 root maldet(29055): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 15 03:45:03 root maldet(29055): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 15 03:45:03 root maldet(29055): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 15 03:45:03 root maldet(29055): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 15 04:09:44 root maldet(29055): {scan} file list completed in 1481s, found 5761 files... Aug 15 04:09:45 root maldet(29055): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 15 04:09:45 root maldet(29055): {scan} scan of (5761 files) in progress... Aug 15 04:11:27 root maldet(29055): {scan} scan completed on : files 5761, malware hits 0, cleaned hits 0, time 1592s Aug 15 04:11:28 root maldet(29055): {scan} scan report saved, to view run: maldet --report 220815-0344.29055 Aug 16 03:25:27 root maldet(10226): {update} checking for available updates... Aug 16 03:25:30 root maldet(10226): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 16 03:25:31 root maldet(10226): {update} hashing install files and checking against server... Aug 16 03:25:32 root maldet(10226): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 16 03:25:33 root maldet(10226): {update} latest version already installed. Aug 16 03:25:35 root maldet(11283): {sigup} performing signature update check... Aug 16 03:25:35 root maldet(11283): {sigup} local signature set is version 20220813479479 Aug 16 03:25:37 root maldet(11283): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 16 03:25:37 root maldet(11283): {sigup} latest signature set already installed Aug 16 03:25:40 root maldet(11906): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 16 03:25:47 root maldet(11906): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 16 03:25:47 root maldet(11906): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 16 03:25:47 root maldet(11906): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 16 03:25:48 root maldet(11906): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 16 03:51:49 root maldet(11906): {scan} file list completed in 1562s, found 57157 files... Aug 16 03:51:49 root maldet(11906): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 16 03:51:50 root maldet(11906): {scan} scan of (57157 files) in progress... Aug 16 04:03:30 root maldet(11906): {hit} malware hit {YARA}multiple_php_webshells found for /home/srgtechn/public_html/3a2a21d337.php Aug 16 04:03:30 root maldet(11906): {quar} malware quarantined from '/home/srgtechn/public_html/3a2a21d337.php' to '/usr/local/maldetect/quarantine/3a2a21d337.php.518722849' Aug 16 04:03:31 root maldet(11906): {scan} scan completed on : files 57157, malware hits 1, cleaned hits 0, time 2270s Aug 16 04:03:31 root maldet(11906): {scan} scan report saved, to view run: maldet --report 220816-0325.11906 Aug 17 03:26:08 root maldet(9176): {update} checking for available updates... Aug 17 03:26:11 root maldet(9176): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 17 03:26:12 root maldet(9176): {update} hashing install files and checking against server... Aug 17 03:26:14 root maldet(9176): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 17 03:26:14 root maldet(9176): {update} latest version already installed. Aug 17 03:26:16 root maldet(10093): {sigup} performing signature update check... Aug 17 03:26:16 root maldet(10093): {sigup} local signature set is version 20220813479479 Aug 17 03:26:18 root maldet(10093): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 17 03:26:19 root maldet(10093): {sigup} new signature set 202208161154632 available Aug 17 03:26:19 root maldet(10093): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 17 03:26:21 root maldet(10093): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 17 03:26:22 root maldet(10093): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Aug 17 03:26:22 root maldet(10093): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 17 03:26:24 root maldet(10093): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 17 03:26:25 root maldet(10093): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Aug 17 03:26:25 root maldet(10093): {sigup} verified md5sum of maldet-sigpack.tgz Aug 17 03:26:26 root maldet(10093): {sigup} unpacked and installed maldet-sigpack.tgz Aug 17 03:26:27 root maldet(10093): {sigup} verified md5sum of maldet-clean.tgz Aug 17 03:26:28 root maldet(10093): {sigup} unpacked and installed maldet-clean.tgz Aug 17 03:26:28 root maldet(10093): {sigup} signature set update completed Aug 17 03:26:28 root maldet(10093): {sigup} 17276 signatures (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 17 03:26:32 root maldet(11754): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 17 03:26:40 root maldet(11754): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 17 03:26:40 root maldet(11754): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 17 03:26:40 root maldet(11754): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 17 03:26:40 root maldet(11754): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 17 03:52:10 root maldet(11754): {scan} file list completed in 1530s, found 33570 files... Aug 17 03:52:10 root maldet(11754): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 17 03:52:11 root maldet(11754): {scan} scan of (33570 files) in progress... Aug 17 03:59:21 root maldet(11754): {scan} scan completed on : files 33570, malware hits 0, cleaned hits 0, time 1969s Aug 17 03:59:21 root maldet(11754): {scan} scan report saved, to view run: maldet --report 220817-0326.11754 Aug 18 03:41:56 root maldet(32068): {update} checking for available updates... Aug 18 03:41:58 root maldet(32068): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 18 03:41:58 root maldet(32068): {update} hashing install files and checking against server... Aug 18 03:42:00 root maldet(32068): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 18 03:42:00 root maldet(32068): {update} latest version already installed. Aug 18 03:42:03 root maldet(32375): {sigup} performing signature update check... Aug 18 03:42:03 root maldet(32375): {sigup} local signature set is version 202208161154632 Aug 18 03:42:05 root maldet(32375): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 18 03:42:05 root maldet(32375): {sigup} latest signature set already installed Aug 18 03:42:08 root maldet(32630): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 18 03:42:16 root maldet(32630): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 18 03:42:16 root maldet(32630): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 18 03:42:16 root maldet(32630): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 18 03:42:16 root maldet(32630): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 18 04:10:26 root maldet(32630): {scan} file list completed in 1689s, found 27773 files... Aug 18 04:10:26 root maldet(32630): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 18 04:10:26 root maldet(32630): {scan} scan of (27773 files) in progress... Aug 18 04:16:47 root maldet(32630): {hit} malware hit {CAV}Win.Trojan.Hide-1 found for /home/grggroup/public_html/mastergrg/gallery/220817220803_proimage.php Aug 18 04:16:48 root maldet(32630): {quar} malware quarantined from '/home/grggroup/public_html/mastergrg/gallery/220817220803_proimage.php' to '/usr/local/maldetect/quarantine/220817220803_proimage.php.853417425' Aug 18 04:16:49 root maldet(32630): {scan} scan completed on : files 27773, malware hits 1, cleaned hits 0, time 2080s Aug 18 04:16:49 root maldet(32630): {scan} scan report saved, to view run: maldet --report 220818-0342.32630 Aug 19 03:18:54 root maldet(2470): {update} checking for available updates... Aug 19 03:18:56 root maldet(2470): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 19 03:18:56 root maldet(2470): {update} hashing install files and checking against server... Aug 19 03:18:56 root maldet(2470): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 19 03:18:56 root maldet(2470): {update} latest version already installed. Aug 19 03:18:56 root maldet(2641): {sigup} performing signature update check... Aug 19 03:18:56 root maldet(2641): {sigup} local signature set is version 202208161154632 Aug 19 03:18:56 root maldet(2641): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 19 03:18:56 root maldet(2641): {sigup} latest signature set already installed Aug 19 03:18:57 root maldet(2767): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 19 03:18:57 root maldet(2767): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 19 03:18:57 root maldet(2767): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 19 03:18:57 root maldet(2767): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 19 03:18:57 root maldet(2767): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 19 03:19:06 root maldet(2767): {scan} file list completed in 9s, found 372490 files... Aug 19 03:19:06 root maldet(2767): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 19 03:19:06 root maldet(2767): {scan} scan of (372490 files) in progress... Aug 19 03:25:51 root maldet(2767): {hit} malware hit {YARA}multiple_php_webshells found for /home/onlinecfo/public_html/6e71b56b27.php Aug 19 03:25:51 root maldet(2767): {quar} malware quarantined from '/home/onlinecfo/public_html/6e71b56b27.php' to '/usr/local/maldetect/quarantine/6e71b56b27.php.26369561' Aug 19 03:25:51 root maldet(2767): {scan} scan completed on : files 372490, malware hits 1, cleaned hits 0, time 414s Aug 19 03:25:51 root maldet(2767): {scan} scan report saved, to view run: maldet --report 220819-0318.2767 Aug 20 03:23:14 root maldet(10000): {update} checking for available updates... Aug 20 03:23:14 root maldet(10000): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 20 03:23:14 root maldet(10000): {update} hashing install files and checking against server... Aug 20 03:23:14 root maldet(10000): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 20 03:23:14 root maldet(10000): {update} latest version already installed. Aug 20 03:23:14 root maldet(10157): {sigup} performing signature update check... Aug 20 03:23:14 root maldet(10157): {sigup} local signature set is version 202208161154632 Aug 20 03:23:15 root maldet(10157): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 20 03:23:15 root maldet(10157): {sigup} new signature set 202208191829481 available Aug 20 03:23:15 root maldet(10157): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 20 03:23:16 root maldet(10157): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 20 03:23:16 root maldet(10157): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Aug 20 03:23:16 root maldet(10157): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 20 03:23:16 root maldet(10157): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 20 03:23:17 root maldet(10157): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Aug 20 03:23:17 root maldet(10157): {sigup} verified md5sum of maldet-sigpack.tgz Aug 20 03:23:17 root maldet(10157): {sigup} unpacked and installed maldet-sigpack.tgz Aug 20 03:23:17 root maldet(10157): {sigup} verified md5sum of maldet-clean.tgz Aug 20 03:23:17 root maldet(10157): {sigup} unpacked and installed maldet-clean.tgz Aug 20 03:23:17 root maldet(10157): {sigup} signature set update completed Aug 20 03:23:17 root maldet(10157): {sigup} 17276 signatures (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 20 03:23:17 root maldet(10428): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 20 03:23:17 root maldet(10428): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 20 03:23:17 root maldet(10428): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 20 03:23:17 root maldet(10428): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 20 03:23:17 root maldet(10428): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 20 03:23:25 root maldet(10428): {scan} file list completed in 8s, found 141 files... Aug 20 03:23:25 root maldet(10428): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 20 03:23:25 root maldet(10428): {scan} scan of (141 files) in progress... Aug 20 03:23:37 root maldet(10428): {hit} malware hit {YARA}eval_post found for /home/onlinecfo/public_html/wp-content/db-cache.php Aug 20 03:23:37 root maldet(10428): {quar} malware quarantined from '/home/onlinecfo/public_html/wp-content/db-cache.php' to '/usr/local/maldetect/quarantine/db-cache.php.102215091' Aug 20 03:23:38 root maldet(10428): {scan} scan completed on : files 141, malware hits 1, cleaned hits 0, time 20s Aug 20 03:23:38 root maldet(10428): {scan} scan report saved, to view run: maldet --report 220820-0323.10428 Aug 21 03:30:14 root maldet(14413): {update} checking for available updates... Aug 21 03:30:15 root maldet(14413): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 21 03:30:15 root maldet(14413): {update} hashing install files and checking against server... Aug 21 03:30:15 root maldet(14413): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 21 03:30:15 root maldet(14413): {update} latest version already installed. Aug 21 03:30:15 root maldet(14564): {sigup} performing signature update check... Aug 21 03:30:15 root maldet(14564): {sigup} local signature set is version 202208191829481 Aug 21 03:30:15 root maldet(14564): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 21 03:30:15 root maldet(14564): {sigup} latest signature set already installed Aug 21 03:30:15 root maldet(14678): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 21 03:30:16 root maldet(14678): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 21 03:30:16 root maldet(14678): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 21 03:30:16 root maldet(14678): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 21 03:30:16 root maldet(14678): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 21 03:30:23 root maldet(14678): {scan} file list completed in 7s, found 115 files... Aug 21 03:30:23 root maldet(14678): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 21 03:30:23 root maldet(14678): {scan} scan of (115 files) in progress... Aug 21 03:30:35 root maldet(14678): {scan} scan completed on : files 115, malware hits 0, cleaned hits 0, time 20s Aug 21 03:30:35 root maldet(14678): {scan} scan report saved, to view run: maldet --report 220821-0330.14678 Aug 22 03:55:24 root maldet(30117): {update} checking for available updates... Aug 22 03:55:25 root maldet(30117): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 22 03:55:25 root maldet(30117): {update} hashing install files and checking against server... Aug 22 03:55:25 root maldet(30117): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 22 03:55:25 root maldet(30117): {update} latest version already installed. Aug 22 03:55:25 root maldet(30289): {sigup} performing signature update check... Aug 22 03:55:25 root maldet(30289): {sigup} local signature set is version 202208191829481 Aug 22 03:55:25 root maldet(30289): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 22 03:55:25 root maldet(30289): {sigup} latest signature set already installed Aug 22 03:55:26 root maldet(30417): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 22 03:55:26 root maldet(30417): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 22 03:55:26 root maldet(30417): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 22 03:55:26 root maldet(30417): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 22 03:55:26 root maldet(30417): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 22 03:55:33 root maldet(30417): {scan} file list completed in 7s, found 81 files... Aug 22 03:55:33 root maldet(30417): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 22 03:55:33 root maldet(30417): {scan} scan of (81 files) in progress... Aug 22 03:55:44 root maldet(30417): {scan} scan completed on : files 81, malware hits 0, cleaned hits 0, time 18s Aug 22 03:55:44 root maldet(30417): {scan} scan report saved, to view run: maldet --report 220822-0355.30417 Aug 23 03:31:14 root maldet(18163): {update} checking for available updates... Aug 23 03:31:16 root maldet(18163): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 23 03:31:16 root maldet(18163): {update} hashing install files and checking against server... Aug 23 03:31:16 root maldet(18163): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 23 03:31:16 root maldet(18163): {update} latest version already installed. Aug 23 03:31:16 root maldet(18345): {sigup} performing signature update check... Aug 23 03:31:16 root maldet(18345): {sigup} local signature set is version 202208191829481 Aug 23 03:31:17 root maldet(18345): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 23 03:31:17 root maldet(18345): {sigup} new signature set 202208222504586 available Aug 23 03:31:17 root maldet(18345): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 23 03:31:17 root maldet(18345): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 23 03:31:18 root maldet(18345): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Aug 23 03:31:18 root maldet(18345): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 23 03:31:18 root maldet(18345): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 23 03:31:18 root maldet(18345): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Aug 23 03:31:18 root maldet(18345): {sigup} verified md5sum of maldet-sigpack.tgz Aug 23 03:31:18 root maldet(18345): {sigup} unpacked and installed maldet-sigpack.tgz Aug 23 03:31:18 root maldet(18345): {sigup} verified md5sum of maldet-clean.tgz Aug 23 03:31:18 root maldet(18345): {sigup} unpacked and installed maldet-clean.tgz Aug 23 03:31:18 root maldet(18345): {sigup} signature set update completed Aug 23 03:31:18 root maldet(18345): {sigup} 17276 signatures (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 23 03:31:19 root maldet(18664): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 23 03:31:19 root maldet(18664): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 23 03:31:19 root maldet(18664): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 23 03:31:19 root maldet(18664): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 23 03:31:19 root maldet(18664): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 23 03:31:28 root maldet(18664): {scan} file list completed in 9s, found 101 files... Aug 23 03:31:28 root maldet(18664): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 23 03:31:28 root maldet(18664): {scan} scan of (101 files) in progress... Aug 23 03:31:42 root maldet(18664): {scan} scan completed on : files 101, malware hits 0, cleaned hits 0, time 23s Aug 23 03:31:42 root maldet(18664): {scan} scan report saved, to view run: maldet --report 220823-0331.18664 Aug 24 03:13:39 root maldet(5449): {update} checking for available updates... Aug 24 03:13:39 root maldet(5449): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 24 03:13:39 root maldet(5449): {update} hashing install files and checking against server... Aug 24 03:13:39 root maldet(5449): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 24 03:13:39 root maldet(5449): {update} latest version already installed. Aug 24 03:13:39 root maldet(5592): {sigup} performing signature update check... Aug 24 03:13:39 root maldet(5592): {sigup} local signature set is version 202208222504586 Aug 24 03:13:40 root maldet(5592): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 24 03:13:40 root maldet(5592): {sigup} latest signature set already installed Aug 24 03:13:40 root maldet(5709): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 24 03:13:40 root maldet(5709): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 24 03:13:40 root maldet(5709): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 24 03:13:40 root maldet(5709): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 24 03:13:40 root maldet(5709): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 24 03:13:47 root maldet(5709): {scan} file list completed in 7s, found 98 files... Aug 24 03:13:47 root maldet(5709): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 24 03:13:47 root maldet(5709): {scan} scan of (98 files) in progress... Aug 24 03:13:59 root maldet(5709): {scan} scan completed on : files 98, malware hits 0, cleaned hits 0, time 19s Aug 24 03:13:59 root maldet(5709): {scan} scan report saved, to view run: maldet --report 220824-0313.5709 Aug 25 03:23:18 root maldet(6197): {update} checking for available updates... Aug 25 03:23:19 root maldet(6197): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 25 03:23:19 root maldet(6197): {update} hashing install files and checking against server... Aug 25 03:23:19 root maldet(6197): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 25 03:23:19 root maldet(6197): {update} latest version already installed. Aug 25 03:23:19 root maldet(6333): {sigup} performing signature update check... Aug 25 03:23:19 root maldet(6333): {sigup} local signature set is version 202208222504586 Aug 25 03:23:19 root maldet(6333): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 25 03:23:19 root maldet(6333): {sigup} latest signature set already installed Aug 25 03:23:19 root maldet(6447): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 25 03:23:20 root maldet(6447): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 25 03:23:20 root maldet(6447): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 25 03:23:20 root maldet(6447): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 25 03:23:20 root maldet(6447): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 25 03:23:27 root maldet(6447): {scan} file list completed in 7s, found 102 files... Aug 25 03:23:27 root maldet(6447): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 25 03:23:27 root maldet(6447): {scan} scan of (102 files) in progress... Aug 25 03:23:40 root maldet(6447): {scan} scan completed on : files 102, malware hits 0, cleaned hits 0, time 20s Aug 25 03:23:40 root maldet(6447): {scan} scan report saved, to view run: maldet --report 220825-0323.6447 Aug 26 03:54:37 root maldet(26978): {update} checking for available updates... Aug 26 03:54:37 root maldet(26978): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 26 03:54:37 root maldet(26978): {update} hashing install files and checking against server... Aug 26 03:54:38 root maldet(26978): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 26 03:54:38 root maldet(26978): {update} latest version already installed. Aug 26 03:54:38 root maldet(27139): {sigup} performing signature update check... Aug 26 03:54:38 root maldet(27139): {sigup} local signature set is version 202208222504586 Aug 26 03:54:38 root maldet(27139): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 26 03:54:38 root maldet(27139): {sigup} new signature set 202208253180101 available Aug 26 03:54:38 root maldet(27139): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 26 03:54:39 root maldet(27139): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 26 03:54:39 root maldet(27139): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Aug 26 03:54:39 root maldet(27139): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 26 03:54:39 root maldet(27139): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 26 03:54:40 root maldet(27139): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Aug 26 03:54:40 root maldet(27139): {sigup} verified md5sum of maldet-sigpack.tgz Aug 26 03:54:40 root maldet(27139): {sigup} unpacked and installed maldet-sigpack.tgz Aug 26 03:54:40 root maldet(27139): {sigup} verified md5sum of maldet-clean.tgz Aug 26 03:54:40 root maldet(27139): {sigup} unpacked and installed maldet-clean.tgz Aug 26 03:54:40 root maldet(27139): {sigup} signature set update completed Aug 26 03:54:40 root maldet(27139): {sigup} 17276 signatures (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 26 03:54:40 root maldet(27414): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 26 03:54:40 root maldet(27414): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 26 03:54:40 root maldet(27414): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 26 03:54:40 root maldet(27414): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 26 03:54:40 root maldet(27414): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 26 03:54:47 root maldet(27414): {scan} file list completed in 7s, found 6279 files... Aug 26 03:54:47 root maldet(27414): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 26 03:54:47 root maldet(27414): {scan} scan of (6279 files) in progress... Aug 26 03:55:30 root maldet(27414): {scan} scan completed on : files 6279, malware hits 0, cleaned hits 0, time 50s Aug 26 03:55:30 root maldet(27414): {scan} scan report saved, to view run: maldet --report 220826-0354.27414 Aug 27 03:37:22 root maldet(32522): {update} checking for available updates... Aug 27 03:37:23 root maldet(32522): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 27 03:37:23 root maldet(32522): {update} hashing install files and checking against server... Aug 27 03:37:23 root maldet(32522): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 27 03:37:23 root maldet(32522): {update} latest version already installed. Aug 27 03:37:23 root maldet(32658): {sigup} performing signature update check... Aug 27 03:37:23 root maldet(32658): {sigup} local signature set is version 202208253180101 Aug 27 03:37:24 root maldet(32658): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 27 03:37:24 root maldet(32658): {sigup} latest signature set already installed Aug 27 03:37:24 root maldet(311): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 27 03:37:24 root maldet(311): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 27 03:37:24 root maldet(311): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 27 03:37:24 root maldet(311): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 27 03:37:24 root maldet(311): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 27 03:37:31 root maldet(311): {scan} file list completed in 7s, found 89 files... Aug 27 03:37:31 root maldet(311): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 27 03:37:31 root maldet(311): {scan} scan of (89 files) in progress... Aug 27 03:37:42 root maldet(311): {scan} scan completed on : files 89, malware hits 0, cleaned hits 0, time 18s Aug 27 03:37:42 root maldet(311): {scan} scan report saved, to view run: maldet --report 220827-0337.311 Aug 28 03:13:41 root maldet(25892): {update} checking for available updates... Aug 28 03:13:42 root maldet(25892): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 28 03:13:42 root maldet(25892): {update} hashing install files and checking against server... Aug 28 03:13:42 root maldet(25892): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 28 03:13:42 root maldet(25892): {update} latest version already installed. Aug 28 03:13:42 root maldet(26031): {sigup} performing signature update check... Aug 28 03:13:42 root maldet(26031): {sigup} local signature set is version 202208253180101 Aug 28 03:13:42 root maldet(26031): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 28 03:13:42 root maldet(26031): {sigup} latest signature set already installed Aug 28 03:13:42 root maldet(26152): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 28 03:13:43 root maldet(26152): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 28 03:13:43 root maldet(26152): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 28 03:13:43 root maldet(26152): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 28 03:13:43 root maldet(26152): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 28 03:13:49 root maldet(26152): {scan} file list completed in 6s, found 105 files... Aug 28 03:13:49 root maldet(26152): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 28 03:13:49 root maldet(26152): {scan} scan of (105 files) in progress... Aug 28 03:14:04 root maldet(26152): {scan} scan completed on : files 105, malware hits 0, cleaned hits 0, time 22s Aug 28 03:14:04 root maldet(26152): {scan} scan report saved, to view run: maldet --report 220828-0313.26152 Aug 29 03:27:38 root maldet(23746): {update} checking for available updates... Aug 29 03:27:39 root maldet(23746): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 29 03:27:39 root maldet(23746): {update} hashing install files and checking against server... Aug 29 03:27:39 root maldet(23746): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 29 03:27:39 root maldet(23746): {update} latest version already installed. Aug 29 03:27:39 root maldet(23885): {sigup} performing signature update check... Aug 29 03:27:39 root maldet(23885): {sigup} local signature set is version 202208253180101 Aug 29 03:27:39 root maldet(23885): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 29 03:27:39 root maldet(23885): {sigup} new signature set 20220828497534 available Aug 29 03:27:39 root maldet(23885): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 29 03:27:40 root maldet(23885): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Aug 29 03:27:40 root maldet(23885): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Aug 29 03:27:40 root maldet(23885): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 29 03:27:41 root maldet(23885): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Aug 29 03:27:41 root maldet(23885): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Aug 29 03:27:41 root maldet(23885): {sigup} verified md5sum of maldet-sigpack.tgz Aug 29 03:27:41 root maldet(23885): {sigup} unpacked and installed maldet-sigpack.tgz Aug 29 03:27:41 root maldet(23885): {sigup} verified md5sum of maldet-clean.tgz Aug 29 03:27:41 root maldet(23885): {sigup} unpacked and installed maldet-clean.tgz Aug 29 03:27:41 root maldet(23885): {sigup} signature set update completed Aug 29 03:27:41 root maldet(23885): {sigup} 17276 signatures (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 29 03:27:41 root maldet(24139): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 29 03:27:41 root maldet(24139): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 29 03:27:41 root maldet(24139): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 29 03:27:41 root maldet(24139): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 29 03:27:41 root maldet(24139): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 29 03:27:49 root maldet(24139): {scan} file list completed in 8s, found 83 files... Aug 29 03:27:49 root maldet(24139): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 29 03:27:49 root maldet(24139): {scan} scan of (83 files) in progress... Aug 29 03:28:00 root maldet(24139): {scan} scan completed on : files 83, malware hits 0, cleaned hits 0, time 19s Aug 29 03:28:00 root maldet(24139): {scan} scan report saved, to view run: maldet --report 220829-0327.24139 Aug 30 03:20:09 root maldet(32441): {update} checking for available updates... Aug 30 03:20:10 root maldet(32441): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 30 03:20:10 root maldet(32441): {update} hashing install files and checking against server... Aug 30 03:20:10 root maldet(32441): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 30 03:20:10 root maldet(32441): {update} latest version already installed. Aug 30 03:20:10 root maldet(32580): {sigup} performing signature update check... Aug 30 03:20:10 root maldet(32580): {sigup} local signature set is version 20220828497534 Aug 30 03:20:11 root maldet(32580): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 30 03:20:11 root maldet(32580): {sigup} latest signature set already installed Aug 30 03:20:11 root maldet(32698): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 30 03:20:11 root maldet(32698): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 30 03:20:11 root maldet(32698): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 30 03:20:11 root maldet(32698): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 30 03:20:11 root maldet(32698): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 30 03:20:19 root maldet(32698): {scan} file list completed in 8s, found 93 files... Aug 30 03:20:19 root maldet(32698): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 30 03:20:19 root maldet(32698): {scan} scan of (93 files) in progress... Aug 30 03:20:31 root maldet(32698): {scan} scan completed on : files 93, malware hits 0, cleaned hits 0, time 20s Aug 30 03:20:31 root maldet(32698): {scan} scan report saved, to view run: maldet --report 220830-0320.32698 Aug 31 03:38:02 root maldet(8266): {update} checking for available updates... Aug 31 03:38:03 root maldet(8266): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Aug 31 03:38:03 root maldet(8266): {update} hashing install files and checking against server... Aug 31 03:38:03 root maldet(8266): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Aug 31 03:38:03 root maldet(8266): {update} latest version already installed. Aug 31 03:38:03 root maldet(8406): {sigup} performing signature update check... Aug 31 03:38:03 root maldet(8406): {sigup} local signature set is version 20220828497534 Aug 31 03:38:03 root maldet(8406): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Aug 31 03:38:03 root maldet(8406): {sigup} latest signature set already installed Aug 31 03:38:03 root maldet(8525): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Aug 31 03:38:04 root maldet(8525): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Aug 31 03:38:04 root maldet(8525): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Aug 31 03:38:04 root maldet(8525): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Aug 31 03:38:04 root maldet(8525): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Aug 31 03:38:10 root maldet(8525): {scan} file list completed in 6s, found 3621 files... Aug 31 03:38:10 root maldet(8525): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Aug 31 03:38:10 root maldet(8525): {scan} scan of (3621 files) in progress... Aug 31 03:39:28 root maldet(8525): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Aug 31 03:39:30 root maldet(8525): {scan} scan completed on : files 3621, malware hits 0, cleaned hits 0, time 85s Aug 31 03:39:30 root maldet(8525): {scan} scan report saved, to view run: maldet --report 220831-0338.8525 Sep 01 03:24:45 root maldet(29974): {update} checking for available updates... Sep 01 03:24:46 root maldet(29974): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 01 03:24:46 root maldet(29974): {update} hashing install files and checking against server... Sep 01 03:24:46 root maldet(29974): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 01 03:24:46 root maldet(29974): {update} latest version already installed. Sep 01 03:24:46 root maldet(30113): {sigup} performing signature update check... Sep 01 03:24:46 root maldet(30113): {sigup} local signature set is version 20220828497534 Sep 01 03:24:48 root maldet(30113): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 01 03:24:48 root maldet(30113): {sigup} new signature set 202208311173030 available Sep 01 03:24:48 root maldet(30113): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 01 03:24:48 root maldet(30113): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 01 03:24:48 root maldet(30113): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 01 03:24:48 root maldet(30113): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 01 03:24:49 root maldet(30113): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 01 03:24:49 root maldet(30113): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 01 03:24:49 root maldet(30113): {sigup} verified md5sum of maldet-sigpack.tgz Sep 01 03:24:49 root maldet(30113): {sigup} unpacked and installed maldet-sigpack.tgz Sep 01 03:24:49 root maldet(30113): {sigup} verified md5sum of maldet-clean.tgz Sep 01 03:24:49 root maldet(30113): {sigup} unpacked and installed maldet-clean.tgz Sep 01 03:24:49 root maldet(30113): {sigup} signature set update completed Sep 01 03:24:49 root maldet(30113): {sigup} 17276 signatures (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Sep 01 03:24:49 root maldet(30376): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 01 03:24:50 root maldet(30376): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Sep 01 03:24:50 root maldet(30376): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 01 03:24:50 root maldet(30376): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 01 03:24:50 root maldet(30376): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 01 03:24:58 root maldet(30376): {scan} file list completed in 8s, found 314 files... Sep 01 03:24:58 root maldet(30376): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 01 03:24:58 root maldet(30376): {scan} scan of (314 files) in progress... Sep 01 03:25:13 root maldet(30376): {hit} malware hit {HEX}php.nested.base64.637 found for /home/mender/public_html/css/load.php Sep 01 03:25:13 root maldet(30376): {quar} malware quarantined from '/home/mender/public_html/css/load.php' to '/usr/local/maldetect/quarantine/load.php.1466427342' Sep 01 03:25:13 root maldet(30376): {scan} scan completed on : files 314, malware hits 1, cleaned hits 0, time 24s Sep 01 03:25:13 root maldet(30376): {scan} scan report saved, to view run: maldet --report 220901-0324.30376 Sep 02 03:47:33 root maldet(32591): {update} checking for available updates... Sep 02 03:47:34 root maldet(32591): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 02 03:47:34 root maldet(32591): {update} hashing install files and checking against server... Sep 02 03:47:34 root maldet(32591): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 02 03:47:34 root maldet(32591): {update} latest version already installed. Sep 02 03:47:34 root maldet(32730): {sigup} performing signature update check... Sep 02 03:47:34 root maldet(32730): {sigup} local signature set is version 202208311173030 Sep 02 03:47:34 root maldet(32730): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 02 03:47:34 root maldet(32730): {sigup} new signature set 202209011806006 available Sep 02 03:47:34 root maldet(32730): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 02 03:47:34 root maldet(32730): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 02 03:47:35 root maldet(32730): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 02 03:47:35 root maldet(32730): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 02 03:47:35 root maldet(32730): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 02 03:47:35 root maldet(32730): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 02 03:47:35 root maldet(32730): {sigup} verified md5sum of maldet-sigpack.tgz Sep 02 03:47:35 root maldet(32730): {sigup} unpacked and installed maldet-sigpack.tgz Sep 02 03:47:35 root maldet(32730): {sigup} verified md5sum of maldet-clean.tgz Sep 02 03:47:35 root maldet(32730): {sigup} unpacked and installed maldet-clean.tgz Sep 02 03:47:35 root maldet(32730): {sigup} signature set update completed Sep 02 03:47:35 root maldet(32730): {sigup} 17276 signatures (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Sep 02 03:47:35 root maldet(568): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 02 03:47:36 root maldet(568): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Sep 02 03:47:36 root maldet(568): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 02 03:47:36 root maldet(568): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 02 03:47:36 root maldet(568): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 02 03:47:43 root maldet(568): {scan} file list completed in 7s, found 188 files... Sep 02 03:47:43 root maldet(568): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 02 03:47:43 root maldet(568): {scan} scan of (188 files) in progress... Sep 02 03:47:57 root maldet(568): {scan} scan completed on : files 188, malware hits 0, cleaned hits 0, time 22s Sep 02 03:47:57 root maldet(568): {scan} scan report saved, to view run: maldet --report 220902-0347.568 Sep 03 03:29:00 root maldet(22079): {update} checking for available updates... Sep 03 03:29:00 root maldet(22079): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 03 03:29:00 root maldet(22079): {update} hashing install files and checking against server... Sep 03 03:29:01 root maldet(22079): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 03 03:29:01 root maldet(22079): {update} latest version already installed. Sep 03 03:29:01 root maldet(22239): {sigup} performing signature update check... Sep 03 03:29:01 root maldet(22239): {sigup} local signature set is version 202209011806006 Sep 03 03:29:01 root maldet(22239): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 03 03:29:01 root maldet(22239): {sigup} latest signature set already installed Sep 03 03:29:01 root maldet(22379): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 03 03:29:02 root maldet(22379): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Sep 03 03:29:02 root maldet(22379): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 03 03:29:02 root maldet(22379): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 03 03:29:02 root maldet(22379): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 03 03:29:08 root maldet(22379): {scan} file list completed in 6s, found 82 files... Sep 03 03:29:08 root maldet(22379): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 03 03:29:08 root maldet(22379): {scan} scan of (82 files) in progress... Sep 03 03:29:20 root maldet(22379): {scan} scan completed on : files 82, malware hits 0, cleaned hits 0, time 19s Sep 03 03:29:20 root maldet(22379): {scan} scan report saved, to view run: maldet --report 220903-0329.22379 Sep 04 03:44:16 root maldet(26414): {update} checking for available updates... Sep 04 03:44:17 root maldet(26414): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 04 03:44:17 root maldet(26414): {update} hashing install files and checking against server... Sep 04 03:44:17 root maldet(26414): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 04 03:44:17 root maldet(26414): {update} latest version already installed. Sep 04 03:44:17 root maldet(26585): {sigup} performing signature update check... Sep 04 03:44:17 root maldet(26585): {sigup} local signature set is version 202209011806006 Sep 04 03:44:17 root maldet(26585): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 04 03:44:17 root maldet(26585): {sigup} latest signature set already installed Sep 04 03:44:17 root maldet(26725): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 04 03:44:18 root maldet(26725): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Sep 04 03:44:18 root maldet(26725): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 04 03:44:18 root maldet(26725): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 04 03:44:18 root maldet(26725): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 04 03:44:25 root maldet(26725): {scan} file list completed in 7s, found 141 files... Sep 04 03:44:25 root maldet(26725): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 04 03:44:25 root maldet(26725): {scan} scan of (141 files) in progress... Sep 04 03:44:39 root maldet(26725): {scan} scan completed on : files 141, malware hits 0, cleaned hits 0, time 22s Sep 04 03:44:39 root maldet(26725): {scan} scan report saved, to view run: maldet --report 220904-0344.26725 Sep 05 03:50:56 root maldet(6083): {update} checking for available updates... Sep 05 03:50:56 root maldet(6083): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 05 03:50:56 root maldet(6083): {update} hashing install files and checking against server... Sep 05 03:50:56 root maldet(6083): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 05 03:50:56 root maldet(6083): {update} latest version already installed. Sep 05 03:50:56 root maldet(6226): {sigup} performing signature update check... Sep 05 03:50:56 root maldet(6226): {sigup} local signature set is version 202209011806006 Sep 05 03:50:57 root maldet(6226): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 05 03:50:57 root maldet(6226): {sigup} latest signature set already installed Sep 05 03:50:57 root maldet(6351): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 05 03:50:57 root maldet(6351): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Sep 05 03:50:57 root maldet(6351): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 05 03:50:57 root maldet(6351): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 05 03:50:57 root maldet(6351): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 05 03:51:04 root maldet(6351): {scan} file list completed in 7s, found 95 files... Sep 05 03:51:04 root maldet(6351): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 05 03:51:04 root maldet(6351): {scan} scan of (95 files) in progress... Sep 05 03:51:15 root maldet(6351): {hit} malware hit {HEX}php.cmdshell.egyspider.240 found for /home/grggroup/public_html/css/wso.php Sep 05 03:51:15 root maldet(6351): {quar} malware quarantined from '/home/grggroup/public_html/css/wso.php' to '/usr/local/maldetect/quarantine/wso.php.1413130279' Sep 05 03:51:16 root maldet(6351): {scan} scan completed on : files 95, malware hits 1, cleaned hits 0, time 18s Sep 05 03:51:16 root maldet(6351): {scan} scan report saved, to view run: maldet --report 220905-0350.6351 Sep 06 03:37:14 root maldet(19940): {update} checking for available updates... Sep 06 03:37:14 root maldet(19940): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 06 03:37:14 root maldet(19940): {update} hashing install files and checking against server... Sep 06 03:37:14 root maldet(19940): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 06 03:37:14 root maldet(19940): {update} latest version already installed. Sep 06 03:37:14 root maldet(20080): {sigup} performing signature update check... Sep 06 03:37:15 root maldet(20080): {sigup} local signature set is version 202209011806006 Sep 06 03:37:15 root maldet(20080): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 06 03:37:15 root maldet(20080): {sigup} latest signature set already installed Sep 06 03:37:15 root maldet(20196): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 06 03:37:15 root maldet(20196): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Sep 06 03:37:15 root maldet(20196): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 06 03:37:15 root maldet(20196): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 06 03:37:15 root maldet(20196): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 06 03:37:22 root maldet(20196): {scan} file list completed in 7s, found 97 files... Sep 06 03:37:22 root maldet(20196): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 06 03:37:22 root maldet(20196): {scan} scan of (97 files) in progress... Sep 06 03:37:32 root maldet(20196): {scan} scan completed on : files 97, malware hits 0, cleaned hits 0, time 17s Sep 06 03:37:32 root maldet(20196): {scan} scan report saved, to view run: maldet --report 220906-0337.20196 Sep 07 03:10:20 root maldet(10465): {update} checking for available updates... Sep 07 03:10:21 root maldet(10465): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 07 03:10:21 root maldet(10465): {update} hashing install files and checking against server... Sep 07 03:10:21 root maldet(10465): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 07 03:10:21 root maldet(10465): {update} latest version already installed. Sep 07 03:10:21 root maldet(10618): {sigup} performing signature update check... Sep 07 03:10:21 root maldet(10618): {sigup} local signature set is version 202209011806006 Sep 07 03:10:21 root maldet(10618): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 07 03:10:21 root maldet(10618): {sigup} latest signature set already installed Sep 07 03:10:22 root maldet(10737): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 07 03:10:22 root maldet(10737): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Sep 07 03:10:22 root maldet(10737): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 07 03:10:22 root maldet(10737): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 07 03:10:22 root maldet(10737): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 07 03:10:29 root maldet(10737): {scan} file list completed in 7s, found 6490 files... Sep 07 03:10:29 root maldet(10737): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 07 03:10:29 root maldet(10737): {scan} scan of (6490 files) in progress... Sep 07 03:11:58 root maldet(10737): {scan} scan completed on : files 6490, malware hits 0, cleaned hits 0, time 96s Sep 07 03:11:58 root maldet(10737): {scan} scan report saved, to view run: maldet --report 220907-0310.10737 Sep 08 03:53:18 root maldet(32616): {update} checking for available updates... Sep 08 03:53:18 root maldet(32616): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 08 03:53:18 root maldet(32616): {update} hashing install files and checking against server... Sep 08 03:53:19 root maldet(32616): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 08 03:53:19 root maldet(32616): {update} latest version already installed. Sep 08 03:53:19 root maldet(32753): {sigup} performing signature update check... Sep 08 03:53:19 root maldet(32753): {sigup} local signature set is version 202209011806006 Sep 08 03:53:19 root maldet(32753): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 08 03:53:19 root maldet(32753): {sigup} new signature set 20220907478978 available Sep 08 03:53:19 root maldet(32753): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 08 03:53:20 root maldet(32753): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 08 03:53:20 root maldet(32753): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 08 03:53:20 root maldet(32753): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 08 03:53:20 root maldet(32753): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 08 03:53:21 root maldet(32753): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 08 03:53:21 root maldet(32753): {sigup} verified md5sum of maldet-sigpack.tgz Sep 08 03:53:21 root maldet(32753): {sigup} unpacked and installed maldet-sigpack.tgz Sep 08 03:53:21 root maldet(32753): {sigup} verified md5sum of maldet-clean.tgz Sep 08 03:53:21 root maldet(32753): {sigup} unpacked and installed maldet-clean.tgz Sep 08 03:53:21 root maldet(32753): {sigup} signature set update completed Sep 08 03:53:21 root maldet(32753): {sigup} 17276 signatures (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Sep 08 03:53:21 root maldet(577): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 08 03:53:21 root maldet(577): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Sep 08 03:53:21 root maldet(577): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 08 03:53:21 root maldet(577): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 08 03:53:21 root maldet(577): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 08 03:53:29 root maldet(577): {scan} file list completed in 8s, found 1196 files... Sep 08 03:53:29 root maldet(577): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 08 03:53:29 root maldet(577): {scan} scan of (1196 files) in progress... Sep 08 03:53:58 root maldet(577): {hit} malware hit {HEX}php.gzbase64.inject.452 found for /home/growthpharma/public_html/Master@Growth/page/220907222429_proimage.php Sep 08 03:53:58 root maldet(577): {quar} malware quarantined from '/home/growthpharma/public_html/Master@Growth/page/220907222429_proimage.php' to '/usr/local/maldetect/quarantine/220907222429_proimage.php.2942513653' Sep 08 03:53:58 root maldet(577): {scan} scan completed on : files 1196, malware hits 1, cleaned hits 0, time 37s Sep 08 03:53:58 root maldet(577): {scan} scan report saved, to view run: maldet --report 220908-0353.577 Sep 09 03:45:18 root maldet(2098): {update} checking for available updates... Sep 09 03:45:18 root maldet(2098): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 09 03:45:18 root maldet(2098): {update} hashing install files and checking against server... Sep 09 03:45:18 root maldet(2098): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 09 03:45:18 root maldet(2098): {update} latest version already installed. Sep 09 03:45:18 root maldet(2236): {sigup} performing signature update check... Sep 09 03:45:18 root maldet(2236): {sigup} local signature set is version 20220907478978 Sep 09 03:45:19 root maldet(2236): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 09 03:45:19 root maldet(2236): {sigup} latest signature set already installed Sep 09 03:45:19 root maldet(2348): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 09 03:45:19 root maldet(2348): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Sep 09 03:45:19 root maldet(2348): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 09 03:45:19 root maldet(2348): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 09 03:45:19 root maldet(2348): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 09 03:45:26 root maldet(2348): {scan} file list completed in 7s, found 430 files... Sep 09 03:45:27 root maldet(2348): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 09 03:45:27 root maldet(2348): {scan} scan of (430 files) in progress... Sep 09 03:45:41 root maldet(2348): {scan} scan completed on : files 430, malware hits 0, cleaned hits 0, time 21s Sep 09 03:45:41 root maldet(2348): {scan} scan report saved, to view run: maldet --report 220909-0345.2348 Sep 10 03:41:01 root maldet(20118): {update} checking for available updates... Sep 10 03:41:01 root maldet(20118): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 10 03:41:01 root maldet(20118): {update} hashing install files and checking against server... Sep 10 03:41:02 root maldet(20118): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 10 03:41:02 root maldet(20118): {update} latest version already installed. Sep 10 03:41:02 root maldet(20255): {sigup} performing signature update check... Sep 10 03:41:02 root maldet(20255): {sigup} local signature set is version 20220907478978 Sep 10 03:41:02 root maldet(20255): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 10 03:41:02 root maldet(20255): {sigup} latest signature set already installed Sep 10 03:41:02 root maldet(20370): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 10 03:41:03 root maldet(20370): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Sep 10 03:41:03 root maldet(20370): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 10 03:41:03 root maldet(20370): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 10 03:41:03 root maldet(20370): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 10 03:41:09 root maldet(20370): {scan} file list completed in 6s, found 160 files... Sep 10 03:41:09 root maldet(20370): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 10 03:41:09 root maldet(20370): {scan} scan of (160 files) in progress... Sep 10 03:41:24 root maldet(20370): {scan} scan completed on : files 160, malware hits 0, cleaned hits 0, time 22s Sep 10 03:41:24 root maldet(20370): {scan} scan report saved, to view run: maldet --report 220910-0341.20370 Sep 11 04:03:13 root maldet(23742): {update} checking for available updates... Sep 11 04:03:14 root maldet(23742): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 11 04:03:14 root maldet(23742): {update} hashing install files and checking against server... Sep 11 04:03:14 root maldet(23742): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 11 04:03:14 root maldet(23742): {update} latest version already installed. Sep 11 04:03:14 root maldet(23881): {sigup} performing signature update check... Sep 11 04:03:14 root maldet(23881): {sigup} local signature set is version 20220907478978 Sep 11 04:03:15 root maldet(23881): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 11 04:03:15 root maldet(23881): {sigup} new signature set 20220910472905 available Sep 11 04:03:15 root maldet(23881): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 11 04:03:15 root maldet(23881): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 11 04:03:17 root maldet(23881): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 11 04:03:17 root maldet(23881): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 11 04:03:17 root maldet(23881): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 11 04:03:17 root maldet(23881): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 11 04:03:17 root maldet(23881): {sigup} verified md5sum of maldet-sigpack.tgz Sep 11 04:03:17 root maldet(23881): {sigup} unpacked and installed maldet-sigpack.tgz Sep 11 04:03:17 root maldet(23881): {sigup} verified md5sum of maldet-clean.tgz Sep 11 04:03:17 root maldet(23881): {sigup} unpacked and installed maldet-clean.tgz Sep 11 04:03:17 root maldet(23881): {sigup} signature set update completed Sep 11 04:03:17 root maldet(23881): {sigup} 17276 signatures (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Sep 11 04:03:17 root maldet(24154): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 11 04:03:18 root maldet(24154): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Sep 11 04:03:18 root maldet(24154): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 11 04:03:18 root maldet(24154): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 11 04:03:18 root maldet(24154): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 11 04:03:24 root maldet(24154): {scan} file list completed in 6s, found 274 files... Sep 11 04:03:24 root maldet(24154): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 11 04:03:24 root maldet(24154): {scan} scan of (274 files) in progress... Sep 11 04:03:40 root maldet(24154): {scan} scan completed on : files 274, malware hits 0, cleaned hits 0, time 23s Sep 11 04:03:40 root maldet(24154): {scan} scan report saved, to view run: maldet --report 220911-0403.24154 Sep 12 03:47:22 root maldet(649): {update} checking for available updates... Sep 12 03:47:23 root maldet(649): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 12 03:47:23 root maldet(649): {update} hashing install files and checking against server... Sep 12 03:47:23 root maldet(649): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 12 03:47:23 root maldet(649): {update} latest version already installed. Sep 12 03:47:23 root maldet(789): {sigup} performing signature update check... Sep 12 03:47:23 root maldet(789): {sigup} local signature set is version 20220910472905 Sep 12 03:47:24 root maldet(789): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 12 03:47:24 root maldet(789): {sigup} latest signature set already installed Sep 12 03:47:24 root maldet(903): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 12 03:47:24 root maldet(903): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Sep 12 03:47:24 root maldet(903): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 12 03:47:24 root maldet(903): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 12 03:47:24 root maldet(903): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 12 03:47:31 root maldet(903): {scan} file list completed in 7s, found 125 files... Sep 12 03:47:31 root maldet(903): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 12 03:47:31 root maldet(903): {scan} scan of (125 files) in progress... Sep 12 03:47:42 root maldet(903): {scan} scan completed on : files 125, malware hits 0, cleaned hits 0, time 18s Sep 12 03:47:42 root maldet(903): {scan} scan report saved, to view run: maldet --report 220912-0347.903 Sep 13 03:50:41 root maldet(14772): {update} checking for available updates... Sep 13 03:50:41 root maldet(14772): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 13 03:50:41 root maldet(14772): {update} hashing install files and checking against server... Sep 13 03:50:41 root maldet(14772): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 13 03:50:41 root maldet(14772): {update} latest version already installed. Sep 13 03:50:41 root maldet(14906): {sigup} performing signature update check... Sep 13 03:50:41 root maldet(14906): {sigup} local signature set is version 20220910472905 Sep 13 03:50:42 root maldet(14906): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 13 03:50:42 root maldet(14906): {sigup} latest signature set already installed Sep 13 03:50:42 root maldet(15019): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 13 03:50:42 root maldet(15019): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Sep 13 03:50:42 root maldet(15019): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 13 03:50:42 root maldet(15019): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 13 03:50:42 root maldet(15019): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 13 03:50:48 root maldet(15019): {scan} file list completed in 6s, found 120 files... Sep 13 03:50:49 root maldet(15019): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 13 03:50:49 root maldet(15019): {scan} scan of (120 files) in progress... Sep 13 03:51:02 root maldet(15019): {scan} scan completed on : files 120, malware hits 0, cleaned hits 0, time 20s Sep 13 03:51:02 root maldet(15019): {scan} scan report saved, to view run: maldet --report 220913-0350.15019 Sep 14 03:39:31 root maldet(344): {update} checking for available updates... Sep 14 03:39:32 root maldet(344): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 14 03:39:32 root maldet(344): {update} hashing install files and checking against server... Sep 14 03:39:32 root maldet(344): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 14 03:39:32 root maldet(344): {update} latest version already installed. Sep 14 03:39:32 root maldet(496): {sigup} performing signature update check... Sep 14 03:39:32 root maldet(496): {sigup} local signature set is version 20220910472905 Sep 14 03:39:32 root maldet(496): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 14 03:39:32 root maldet(496): {sigup} latest signature set already installed Sep 14 03:39:32 root maldet(653): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 14 03:39:32 root maldet(653): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Sep 14 03:39:32 root maldet(653): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 14 03:39:32 root maldet(653): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 14 03:39:32 root maldet(653): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 14 03:39:39 root maldet(653): {scan} file list completed in 7s, found 16504 files... Sep 14 03:39:39 root maldet(653): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 14 03:39:39 root maldet(653): {scan} scan of (16504 files) in progress... Sep 14 03:42:19 root maldet(653): {hit} malware hit {HEX}php.base64.inject.178 found for /home/camsa/public_html/Dashboard/documents/13.txt Sep 14 03:42:19 root maldet(653): {quar} malware quarantined from '/home/camsa/public_html/Dashboard/documents/13.txt' to '/usr/local/maldetect/quarantine/13.txt.2581124254' Sep 14 03:42:19 root maldet(653): {hit} malware hit {HEX}php.base64.inject.178 found for /home/camsa/public_html/Dashboard/documents/14.php Sep 14 03:42:19 root maldet(653): {quar} malware quarantined from '/home/camsa/public_html/Dashboard/documents/14.php' to '/usr/local/maldetect/quarantine/14.php.114075904' Sep 14 03:42:19 root maldet(653): {hit} malware hit {CAV}Win.Trojan.Hide-2 found for /home/camsa/public_html/Dashboard/documents/17.php Sep 14 03:42:19 root maldet(653): {quar} malware quarantined from '/home/camsa/public_html/Dashboard/documents/17.php' to '/usr/local/maldetect/quarantine/17.php.1597331793' Sep 14 03:42:19 root maldet(653): {hit} malware hit {HEX}perl.generic.fakeproc.40 found for /home/winnergears/public_html/assets/css/con7ext_cgi/cgi.con7ext Sep 14 03:42:19 root maldet(653): {quar} malware quarantined from '/home/winnergears/public_html/assets/css/con7ext_cgi/cgi.con7ext' to '/usr/local/maldetect/quarantine/cgi.con7ext.305421747' Sep 14 03:42:19 root maldet(653): {hit} malware hit {MD5}php.malware.fopo.12885 found for /home/winnergears/public_html/masterwinner/page/sym403.php Sep 14 03:42:19 root maldet(653): {quar} malware quarantined from '/home/winnergears/public_html/masterwinner/page/sym403.php' to '/usr/local/maldetect/quarantine/sym403.php.1219311250' Sep 14 03:42:19 root maldet(653): {scan} scan completed on : files 16504, malware hits 5, cleaned hits 0, time 167s Sep 14 03:42:19 root maldet(653): {scan} scan report saved, to view run: maldet --report 220914-0339.653 Sep 15 03:14:31 root maldet(23542): {update} checking for available updates... Sep 15 03:14:31 root maldet(23542): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 15 03:14:31 root maldet(23542): {update} hashing install files and checking against server... Sep 15 03:14:31 root maldet(23542): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 15 03:14:31 root maldet(23542): {update} latest version already installed. Sep 15 03:14:32 root maldet(23677): {sigup} performing signature update check... Sep 15 03:14:32 root maldet(23677): {sigup} local signature set is version 20220910472905 Sep 15 03:14:32 root maldet(23677): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 15 03:14:32 root maldet(23677): {sigup} latest signature set already installed Sep 15 03:14:32 root maldet(23788): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 15 03:14:32 root maldet(23788): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Sep 15 03:14:32 root maldet(23788): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 15 03:14:32 root maldet(23788): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 15 03:14:32 root maldet(23788): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 15 03:14:39 root maldet(23788): {scan} file list completed in 7s, found 427 files... Sep 15 03:14:39 root maldet(23788): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 15 03:14:39 root maldet(23788): {scan} scan of (427 files) in progress... Sep 15 03:14:53 root maldet(23788): {scan} scan completed on : files 427, malware hits 0, cleaned hits 0, time 21s Sep 15 03:14:53 root maldet(23788): {scan} scan report saved, to view run: maldet --report 220915-0314.23788 Sep 16 03:17:56 root maldet(31336): {update} checking for available updates... Sep 16 03:17:56 root maldet(31336): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 16 03:17:56 root maldet(31336): {update} hashing install files and checking against server... Sep 16 03:17:56 root maldet(31336): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 16 03:17:56 root maldet(31336): {update} latest version already installed. Sep 16 03:17:57 root maldet(31469): {sigup} performing signature update check... Sep 16 03:17:57 root maldet(31469): {sigup} local signature set is version 20220910472905 Sep 16 03:17:57 root maldet(31469): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 16 03:17:57 root maldet(31469): {sigup} latest signature set already installed Sep 16 03:17:57 root maldet(31582): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 16 03:17:57 root maldet(31582): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Sep 16 03:17:57 root maldet(31582): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 16 03:17:57 root maldet(31582): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 16 03:17:57 root maldet(31582): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 16 03:18:05 root maldet(31582): {scan} file list completed in 8s, found 1370 files... Sep 16 03:18:05 root maldet(31582): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 16 03:18:05 root maldet(31582): {scan} scan of (1370 files) in progress... Sep 16 03:19:04 root maldet(31582): {hit} malware hit {HEX}php.generic.malware.442 found for /home/hewaindia/public_html/master@hewa/fckeditor/_samples/_plugins/lock360.php Sep 16 03:19:04 root maldet(31582): {quar} malware quarantined from '/home/hewaindia/public_html/master@hewa/fckeditor/_samples/_plugins/lock360.php' to '/usr/local/maldetect/quarantine/lock360.php.3054420965' Sep 16 03:19:05 root maldet(31582): {hit} malware hit {HEX}php.generic.malware.442 found for /home/hewaindia/public_html/master@hewa/fckeditor/_samples/_plugins/index.php Sep 16 03:19:05 root maldet(31582): {quar} malware quarantined from '/home/hewaindia/public_html/master@hewa/fckeditor/_samples/_plugins/index.php' to '/usr/local/maldetect/quarantine/index.php.1361912655' Sep 16 03:19:05 root maldet(31582): {scan} scan completed on : files 1370, malware hits 2, cleaned hits 0, time 68s Sep 16 03:19:05 root maldet(31582): {scan} scan report saved, to view run: maldet --report 220916-0317.31582 Sep 17 03:17:15 root maldet(2158): {update} checking for available updates... Sep 17 03:17:15 root maldet(2158): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 17 03:17:15 root maldet(2158): {update} hashing install files and checking against server... Sep 17 03:17:16 root maldet(2158): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 17 03:17:16 root maldet(2158): {update} latest version already installed. Sep 17 03:17:16 root maldet(2300): {sigup} performing signature update check... Sep 17 03:17:16 root maldet(2300): {sigup} local signature set is version 20220910472905 Sep 17 03:17:16 root maldet(2300): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 17 03:17:16 root maldet(2300): {sigup} latest signature set already installed Sep 17 03:17:16 root maldet(2421): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 17 03:17:16 root maldet(2421): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Sep 17 03:17:16 root maldet(2421): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 17 03:17:16 root maldet(2421): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 17 03:17:16 root maldet(2421): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 17 03:17:23 root maldet(2421): {scan} file list completed in 7s, found 1048 files... Sep 17 03:17:23 root maldet(2421): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 17 03:17:23 root maldet(2421): {scan} scan of (1048 files) in progress... Sep 17 03:17:49 root maldet(2421): {scan} scan completed on : files 1048, malware hits 0, cleaned hits 0, time 33s Sep 17 03:17:49 root maldet(2421): {scan} scan report saved, to view run: maldet --report 220917-0317.2421 Sep 18 03:20:14 root maldet(19597): {update} checking for available updates... Sep 18 03:20:14 root maldet(19597): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 18 03:20:14 root maldet(19597): {update} hashing install files and checking against server... Sep 18 03:20:14 root maldet(19597): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 18 03:20:14 root maldet(19597): {update} latest version already installed. Sep 18 03:20:14 root maldet(19749): {sigup} performing signature update check... Sep 18 03:20:14 root maldet(19749): {sigup} local signature set is version 20220910472905 Sep 18 03:20:15 root maldet(19749): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 18 03:20:15 root maldet(19749): {sigup} latest signature set already installed Sep 18 03:20:15 root maldet(19887): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 18 03:20:15 root maldet(19887): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Sep 18 03:20:15 root maldet(19887): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 18 03:20:15 root maldet(19887): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 18 03:20:15 root maldet(19887): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 18 03:20:22 root maldet(19887): {scan} file list completed in 7s, found 103 files... Sep 18 03:20:22 root maldet(19887): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 18 03:20:22 root maldet(19887): {scan} scan of (103 files) in progress... Sep 18 03:20:34 root maldet(19887): {scan} scan completed on : files 103, malware hits 0, cleaned hits 0, time 19s Sep 18 03:20:34 root maldet(19887): {scan} scan report saved, to view run: maldet --report 220918-0320.19887 Sep 19 03:33:46 root maldet(8891): {update} checking for available updates... Sep 19 03:33:46 root maldet(8891): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 19 03:33:46 root maldet(8891): {update} hashing install files and checking against server... Sep 19 03:33:47 root maldet(8891): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 19 03:33:47 root maldet(8891): {update} latest version already installed. Sep 19 03:33:47 root maldet(9034): {sigup} performing signature update check... Sep 19 03:33:47 root maldet(9034): {sigup} local signature set is version 20220910472905 Sep 19 03:33:47 root maldet(9034): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 19 03:33:47 root maldet(9034): {sigup} latest signature set already installed Sep 19 03:33:47 root maldet(9147): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 19 03:33:47 root maldet(9147): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Sep 19 03:33:47 root maldet(9147): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 19 03:33:47 root maldet(9147): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 19 03:33:47 root maldet(9147): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 19 03:33:54 root maldet(9147): {scan} file list completed in 7s, found 89 files... Sep 19 03:33:54 root maldet(9147): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 19 03:33:54 root maldet(9147): {scan} scan of (89 files) in progress... Sep 19 03:34:04 root maldet(9147): {scan} scan completed on : files 89, malware hits 0, cleaned hits 0, time 17s Sep 19 03:34:04 root maldet(9147): {scan} scan report saved, to view run: maldet --report 220919-0333.9147 Sep 20 03:26:35 root maldet(4259): {update} checking for available updates... Sep 20 03:26:35 root maldet(4259): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 20 03:26:35 root maldet(4259): {update} hashing install files and checking against server... Sep 20 03:26:36 root maldet(4259): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 20 03:26:36 root maldet(4259): {update} latest version already installed. Sep 20 03:26:36 root maldet(4417): {sigup} performing signature update check... Sep 20 03:26:36 root maldet(4417): {sigup} local signature set is version 20220910472905 Sep 20 03:26:36 root maldet(4417): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 20 03:26:36 root maldet(4417): {sigup} new signature set 20220919522209 available Sep 20 03:26:36 root maldet(4417): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 20 03:26:37 root maldet(4417): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 20 03:26:37 root maldet(4417): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 20 03:26:37 root maldet(4417): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 20 03:26:37 root maldet(4417): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 20 03:26:38 root maldet(4417): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 20 03:26:38 root maldet(4417): {sigup} verified md5sum of maldet-sigpack.tgz Sep 20 03:26:38 root maldet(4417): {sigup} unpacked and installed maldet-sigpack.tgz Sep 20 03:26:38 root maldet(4417): {sigup} verified md5sum of maldet-clean.tgz Sep 20 03:26:38 root maldet(4417): {sigup} unpacked and installed maldet-clean.tgz Sep 20 03:26:38 root maldet(4417): {sigup} signature set update completed Sep 20 03:26:38 root maldet(4417): {sigup} 17276 signatures (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Sep 20 03:26:38 root maldet(4668): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 20 03:26:38 root maldet(4668): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Sep 20 03:26:38 root maldet(4668): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 20 03:26:38 root maldet(4668): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 20 03:26:38 root maldet(4668): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 20 03:26:46 root maldet(4668): {scan} file list completed in 8s, found 111 files... Sep 20 03:26:46 root maldet(4668): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 20 03:26:46 root maldet(4668): {scan} scan of (111 files) in progress... Sep 20 03:27:00 root maldet(4668): {scan} scan completed on : files 111, malware hits 0, cleaned hits 0, time 22s Sep 20 03:27:00 root maldet(4668): {scan} scan report saved, to view run: maldet --report 220920-0326.4668 Sep 21 03:22:55 root maldet(1409): {update} checking for available updates... Sep 21 03:22:55 root maldet(1409): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 21 03:22:55 root maldet(1409): {update} hashing install files and checking against server... Sep 21 03:22:55 root maldet(1409): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 21 03:22:55 root maldet(1409): {update} latest version already installed. Sep 21 03:22:56 root maldet(1562): {sigup} performing signature update check... Sep 21 03:22:56 root maldet(1562): {sigup} local signature set is version 20220919522209 Sep 21 03:22:56 root maldet(1562): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 21 03:22:56 root maldet(1562): {sigup} latest signature set already installed Sep 21 03:22:56 root maldet(1688): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 21 03:22:56 root maldet(1688): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Sep 21 03:22:56 root maldet(1688): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 21 03:22:56 root maldet(1688): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 21 03:22:56 root maldet(1688): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 21 03:23:04 root maldet(1688): {scan} file list completed in 8s, found 5852 files... Sep 21 03:23:04 root maldet(1688): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 21 03:23:04 root maldet(1688): {scan} scan of (5852 files) in progress... Sep 21 03:23:22 root maldet(1688): {scan} scan completed on : files 5852, malware hits 0, cleaned hits 0, time 26s Sep 21 03:23:22 root maldet(1688): {scan} scan report saved, to view run: maldet --report 220921-0322.1688 Sep 22 03:54:15 root maldet(14644): {update} checking for available updates... Sep 22 03:54:15 root maldet(14644): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 22 03:54:15 root maldet(14644): {update} hashing install files and checking against server... Sep 22 03:54:15 root maldet(14644): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 22 03:54:15 root maldet(14644): {update} latest version already installed. Sep 22 03:54:16 root maldet(14780): {sigup} performing signature update check... Sep 22 03:54:16 root maldet(14780): {sigup} local signature set is version 20220919522209 Sep 22 03:54:16 root maldet(14780): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 22 03:54:16 root maldet(14780): {sigup} latest signature set already installed Sep 22 03:54:16 root maldet(14901): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 22 03:54:16 root maldet(14901): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Sep 22 03:54:16 root maldet(14901): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 22 03:54:16 root maldet(14901): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 22 03:54:16 root maldet(14901): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 22 03:54:24 root maldet(14901): {scan} file list completed in 8s, found 588 files... Sep 22 03:54:24 root maldet(14901): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 22 03:54:24 root maldet(14901): {scan} scan of (588 files) in progress... Sep 22 03:54:37 root maldet(14901): {hit} malware hit {HEX}php.gzbase64.inject.452 found for /home/aftptarun/public_html/0z.php Sep 22 03:54:37 root maldet(14901): {quar} malware quarantined from '/home/aftptarun/public_html/0z.php' to '/usr/local/maldetect/quarantine/0z.php.1956716336' Sep 22 03:54:37 root maldet(14901): {scan} scan completed on : files 588, malware hits 1, cleaned hits 0, time 21s Sep 22 03:54:37 root maldet(14901): {scan} scan report saved, to view run: maldet --report 220922-0354.14901 Sep 23 03:42:33 root maldet(3721): {update} checking for available updates... Sep 23 03:42:33 root maldet(3721): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 23 03:42:33 root maldet(3721): {update} hashing install files and checking against server... Sep 23 03:42:33 root maldet(3721): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 23 03:42:33 root maldet(3721): {update} latest version already installed. Sep 23 03:42:33 root maldet(3862): {sigup} performing signature update check... Sep 23 03:42:33 root maldet(3862): {sigup} local signature set is version 20220919522209 Sep 23 03:42:34 root maldet(3862): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 23 03:42:34 root maldet(3862): {sigup} new signature set 202209221198814 available Sep 23 03:42:34 root maldet(3862): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 23 03:42:35 root maldet(3862): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 23 03:42:35 root maldet(3862): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 23 03:42:35 root maldet(3862): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 23 03:42:35 root maldet(3862): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 23 03:42:36 root maldet(3862): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 23 03:42:36 root maldet(3862): {sigup} verified md5sum of maldet-sigpack.tgz Sep 23 03:42:36 root maldet(3862): {sigup} unpacked and installed maldet-sigpack.tgz Sep 23 03:42:36 root maldet(3862): {sigup} verified md5sum of maldet-clean.tgz Sep 23 03:42:36 root maldet(3862): {sigup} unpacked and installed maldet-clean.tgz Sep 23 03:42:36 root maldet(3862): {sigup} signature set update completed Sep 23 03:42:36 root maldet(3862): {sigup} 17276 signatures (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Sep 23 03:42:36 root maldet(4115): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 23 03:42:36 root maldet(4115): {scan} signatures loaded: 17276 (14454 MD5 | 2039 HEX | 783 YARA | 0 USER) Sep 23 03:42:36 root maldet(4115): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 23 03:42:36 root maldet(4115): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 23 03:42:36 root maldet(4115): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 23 03:42:43 root maldet(4115): {scan} file list completed in 7s, found 6267 files... Sep 23 03:42:44 root maldet(4115): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 23 03:42:44 root maldet(4115): {scan} scan of (6267 files) in progress... Sep 23 03:43:15 root maldet(4115): {scan} scan completed on : files 6267, malware hits 0, cleaned hits 0, time 39s Sep 23 03:43:15 root maldet(4115): {scan} scan report saved, to view run: maldet --report 220923-0342.4115 Sep 24 03:34:00 root maldet(10979): {update} checking for available updates... Sep 24 03:34:00 root maldet(10979): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 24 03:34:00 root maldet(10979): {update} hashing install files and checking against server... Sep 24 03:34:01 root maldet(10979): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 24 03:34:01 root maldet(10979): {update} latest version already installed. Sep 24 03:34:01 root maldet(11177): {sigup} performing signature update check... Sep 24 03:34:01 root maldet(11177): {sigup} local signature set is version 202209221198814 Sep 24 03:34:01 root maldet(11177): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 24 03:34:01 root maldet(11177): {sigup} new signature set 202209231843944 available Sep 24 03:34:01 root maldet(11177): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 24 03:34:01 root maldet(11177): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 24 03:34:02 root maldet(11177): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 24 03:34:02 root maldet(11177): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 24 03:34:02 root maldet(11177): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 24 03:34:02 root maldet(11177): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 24 03:34:02 root maldet(11177): {sigup} verified md5sum of maldet-sigpack.tgz Sep 24 03:34:03 root maldet(11177): {sigup} unpacked and installed maldet-sigpack.tgz Sep 24 03:34:03 root maldet(11177): {sigup} verified md5sum of maldet-clean.tgz Sep 24 03:34:03 root maldet(11177): {sigup} unpacked and installed maldet-clean.tgz Sep 24 03:34:03 root maldet(11177): {sigup} signature set update completed Sep 24 03:34:03 root maldet(11177): {sigup} 17278 signatures (14455 MD5 | 2040 HEX | 783 YARA | 0 USER) Sep 24 03:34:03 root maldet(11490): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 24 03:34:04 root maldet(11490): {scan} signatures loaded: 17278 (14455 MD5 | 2040 HEX | 783 YARA | 0 USER) Sep 24 03:34:04 root maldet(11490): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 24 03:34:04 root maldet(11490): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 24 03:34:04 root maldet(11490): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 24 03:34:32 root maldet(11490): {scan} file list completed in 28s, found 112 files... Sep 24 03:34:32 root maldet(11490): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 24 03:34:32 root maldet(11490): {scan} scan of (112 files) in progress... Sep 24 03:34:51 root maldet(11490): {scan} scan completed on : files 112, malware hits 0, cleaned hits 0, time 48s Sep 24 03:34:51 root maldet(11490): {scan} scan report saved, to view run: maldet --report 220924-0334.11490 Sep 25 03:53:27 root maldet(10903): {update} checking for available updates... Sep 25 03:53:27 root maldet(10903): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 25 03:53:27 root maldet(10903): {update} hashing install files and checking against server... Sep 25 03:53:28 root maldet(10903): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 25 03:53:28 root maldet(10903): {update} latest version already installed. Sep 25 03:53:28 root maldet(11038): {sigup} performing signature update check... Sep 25 03:53:28 root maldet(11038): {sigup} local signature set is version 202209231843944 Sep 25 03:53:28 root maldet(11038): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 25 03:53:28 root maldet(11038): {sigup} latest signature set already installed Sep 25 03:53:28 root maldet(11164): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 25 03:53:28 root maldet(11164): {scan} signatures loaded: 17278 (14455 MD5 | 2040 HEX | 783 YARA | 0 USER) Sep 25 03:53:28 root maldet(11164): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 25 03:53:28 root maldet(11164): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 25 03:53:28 root maldet(11164): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 25 03:53:36 root maldet(11164): {scan} file list completed in 8s, found 14562 files... Sep 25 03:53:36 root maldet(11164): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 25 03:53:36 root maldet(11164): {scan} scan of (14562 files) in progress... Sep 25 03:56:16 root maldet(11164): {hit} malware hit {HEX}php.inject.miner2a2.485 found for /home/onlinecfo/public_html/wp-content/404CPH/fiduciaco-Drupal-portal.txt404/.d46c2580.ico Sep 25 03:56:16 root maldet(11164): {quar} malware quarantined from '/home/onlinecfo/public_html/wp-content/404CPH/fiduciaco-Drupal-portal.txt404/.d46c2580.ico' to '/usr/local/maldetect/quarantine/.d46c2580.ico.31494464' Sep 25 03:56:16 root maldet(11164): {scan} scan completed on : files 14562, malware hits 1, cleaned hits 0, time 168s Sep 25 03:56:16 root maldet(11164): {scan} scan report saved, to view run: maldet --report 220925-0353.11164 Sep 26 03:29:13 root maldet(15224): {update} checking for available updates... Sep 26 03:29:14 root maldet(15224): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 26 03:29:14 root maldet(15224): {update} hashing install files and checking against server... Sep 26 03:29:14 root maldet(15224): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 26 03:29:14 root maldet(15224): {update} latest version already installed. Sep 26 03:29:14 root maldet(15360): {sigup} performing signature update check... Sep 26 03:29:14 root maldet(15360): {sigup} local signature set is version 202209231843944 Sep 26 03:29:14 root maldet(15360): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 26 03:29:14 root maldet(15360): {sigup} new signature set 202209252485846 available Sep 26 03:29:14 root maldet(15360): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 26 03:29:14 root maldet(15360): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 26 03:29:15 root maldet(15360): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 26 03:29:15 root maldet(15360): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 26 03:29:15 root maldet(15360): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 26 03:29:15 root maldet(15360): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 26 03:29:15 root maldet(15360): {sigup} verified md5sum of maldet-sigpack.tgz Sep 26 03:29:15 root maldet(15360): {sigup} unpacked and installed maldet-sigpack.tgz Sep 26 03:29:15 root maldet(15360): {sigup} verified md5sum of maldet-clean.tgz Sep 26 03:29:15 root maldet(15360): {sigup} unpacked and installed maldet-clean.tgz Sep 26 03:29:15 root maldet(15360): {sigup} signature set update completed Sep 26 03:29:16 root maldet(15360): {sigup} 17278 signatures (14455 MD5 | 2040 HEX | 783 YARA | 0 USER) Sep 26 03:29:16 root maldet(15617): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 26 03:29:16 root maldet(15617): {scan} signatures loaded: 17278 (14455 MD5 | 2040 HEX | 783 YARA | 0 USER) Sep 26 03:29:16 root maldet(15617): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 26 03:29:16 root maldet(15617): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 26 03:29:16 root maldet(15617): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 26 03:29:23 root maldet(15617): {scan} file list completed in 7s, found 144 files... Sep 26 03:29:23 root maldet(15617): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 26 03:29:23 root maldet(15617): {scan} scan of (144 files) in progress... Sep 26 03:29:51 root maldet(15617): {scan} scan completed on : files 144, malware hits 0, cleaned hits 0, time 35s Sep 26 03:29:51 root maldet(15617): {scan} scan report saved, to view run: maldet --report 220926-0329.15617 Sep 27 03:18:46 root maldet(13681): {update} checking for available updates... Sep 27 03:18:46 root maldet(13681): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 27 03:18:46 root maldet(13681): {update} hashing install files and checking against server... Sep 27 03:18:46 root maldet(13681): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 27 03:18:46 root maldet(13681): {update} latest version already installed. Sep 27 03:18:46 root maldet(13817): {sigup} performing signature update check... Sep 27 03:18:46 root maldet(13817): {sigup} local signature set is version 202209252485846 Sep 27 03:18:46 root maldet(13817): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 27 03:18:46 root maldet(13817): {sigup} latest signature set already installed Sep 27 03:18:47 root maldet(13930): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 27 03:18:47 root maldet(13930): {scan} signatures loaded: 17278 (14455 MD5 | 2040 HEX | 783 YARA | 0 USER) Sep 27 03:18:47 root maldet(13930): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 27 03:18:47 root maldet(13930): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 27 03:18:47 root maldet(13930): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 27 03:18:54 root maldet(13930): {scan} file list completed in 7s, found 11918 files... Sep 27 03:18:54 root maldet(13930): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 27 03:18:54 root maldet(13930): {scan} scan of (11918 files) in progress... Sep 27 03:21:40 root maldet(13930): {hit} malware hit {HEX}php.gzbase64.inject.452 found for /home/aftptarun/public_html/0z.php Sep 27 03:21:40 root maldet(13930): {quar} malware quarantined from '/home/aftptarun/public_html/0z.php' to '/usr/local/maldetect/quarantine/0z.php.2161932175' Sep 27 03:21:40 root maldet(13930): {hit} malware hit {HEX}php.inject.miner2a2.485 found for /home/onlinecfo/public_html/wp-content/404CPH/sibaente-WHMCS-accounts-public_html.txt404/.19b1e746.ico Sep 27 03:21:40 root maldet(13930): {quar} malware quarantined from '/home/onlinecfo/public_html/wp-content/404CPH/sibaente-WHMCS-accounts-public_html.txt404/.19b1e746.ico' to '/usr/local/maldetect/quarantine/.19b1e746.ico.850717762' Sep 27 03:21:40 root maldet(13930): {scan} scan completed on : files 11918, malware hits 2, cleaned hits 0, time 173s Sep 27 03:21:40 root maldet(13930): {scan} scan report saved, to view run: maldet --report 220927-0318.13930 Sep 28 03:33:32 root maldet(24120): {update} checking for available updates... Sep 28 03:33:32 root maldet(24120): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 28 03:33:32 root maldet(24120): {update} hashing install files and checking against server... Sep 28 03:33:32 root maldet(24120): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 28 03:33:32 root maldet(24120): {update} latest version already installed. Sep 28 03:33:32 root maldet(24257): {sigup} performing signature update check... Sep 28 03:33:32 root maldet(24257): {sigup} local signature set is version 202209252485846 Sep 28 03:33:33 root maldet(24257): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 28 03:33:33 root maldet(24257): {sigup} latest signature set already installed Sep 28 03:33:33 root maldet(24372): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 28 03:33:33 root maldet(24372): {scan} signatures loaded: 17278 (14455 MD5 | 2040 HEX | 783 YARA | 0 USER) Sep 28 03:33:33 root maldet(24372): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 28 03:33:33 root maldet(24372): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 28 03:33:33 root maldet(24372): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 28 03:33:40 root maldet(24372): {scan} file list completed in 7s, found 5375 files... Sep 28 03:33:40 root maldet(24372): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 28 03:33:40 root maldet(24372): {scan} scan of (5375 files) in progress... Sep 28 03:34:55 root maldet(24372): {scan} scan completed on : files 5375, malware hits 0, cleaned hits 0, time 82s Sep 28 03:34:55 root maldet(24372): {scan} scan report saved, to view run: maldet --report 220928-0333.24372 Sep 29 03:46:28 root maldet(23701): {update} checking for available updates... Sep 29 03:46:28 root maldet(23701): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 29 03:46:28 root maldet(23701): {update} hashing install files and checking against server... Sep 29 03:46:28 root maldet(23701): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 29 03:46:28 root maldet(23701): {update} latest version already installed. Sep 29 03:46:28 root maldet(23849): {sigup} performing signature update check... Sep 29 03:46:28 root maldet(23849): {sigup} local signature set is version 202209252485846 Sep 29 03:46:28 root maldet(23849): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 29 03:46:28 root maldet(23849): {sigup} new signature set 202209283161215 available Sep 29 03:46:28 root maldet(23849): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 29 03:46:29 root maldet(23849): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 29 03:46:29 root maldet(23849): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 29 03:46:29 root maldet(23849): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 29 03:46:29 root maldet(23849): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 29 03:46:29 root maldet(23849): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 29 03:46:29 root maldet(23849): {sigup} verified md5sum of maldet-sigpack.tgz Sep 29 03:46:30 root maldet(23849): {sigup} unpacked and installed maldet-sigpack.tgz Sep 29 03:46:30 root maldet(23849): {sigup} verified md5sum of maldet-clean.tgz Sep 29 03:46:30 root maldet(23849): {sigup} unpacked and installed maldet-clean.tgz Sep 29 03:46:30 root maldet(23849): {sigup} signature set update completed Sep 29 03:46:30 root maldet(23849): {sigup} 17278 signatures (14455 MD5 | 2040 HEX | 783 YARA | 0 USER) Sep 29 03:46:30 root maldet(24111): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 29 03:46:30 root maldet(24111): {scan} signatures loaded: 17278 (14455 MD5 | 2040 HEX | 783 YARA | 0 USER) Sep 29 03:46:30 root maldet(24111): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 29 03:46:30 root maldet(24111): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 29 03:46:30 root maldet(24111): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 29 03:46:37 root maldet(24111): {scan} file list completed in 7s, found 579 files... Sep 29 03:46:37 root maldet(24111): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 29 03:46:37 root maldet(24111): {scan} scan of (579 files) in progress... Sep 29 03:46:52 root maldet(24111): {hit} malware hit {HEX}php.base64.inject.181 found for /home/aftptarun/public_html/de.php Sep 29 03:46:52 root maldet(24111): {quar} malware quarantined from '/home/aftptarun/public_html/de.php' to '/usr/local/maldetect/quarantine/de.php.35033981' Sep 29 03:46:52 root maldet(24111): {scan} scan completed on : files 579, malware hits 1, cleaned hits 0, time 22s Sep 29 03:46:52 root maldet(24111): {scan} scan report saved, to view run: maldet --report 220929-0346.24111 Sep 30 03:31:20 root maldet(11954): {update} checking for available updates... Sep 30 03:31:20 root maldet(11954): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 30 03:31:20 root maldet(11954): {update} hashing install files and checking against server... Sep 30 03:31:20 root maldet(11954): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 30 03:31:20 root maldet(11954): {update} latest version already installed. Sep 30 03:31:20 root maldet(12093): {sigup} performing signature update check... Sep 30 03:31:20 root maldet(12093): {sigup} local signature set is version 202209283161215 Sep 30 03:31:21 root maldet(12093): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 30 03:31:21 root maldet(12093): {sigup} latest signature set already installed Sep 30 03:31:21 root maldet(12207): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 30 03:31:21 root maldet(12207): {scan} signatures loaded: 17278 (14455 MD5 | 2040 HEX | 783 YARA | 0 USER) Sep 30 03:31:21 root maldet(12207): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Sep 30 03:31:21 root maldet(12207): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 30 03:31:21 root maldet(12207): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 30 03:31:28 root maldet(12207): {scan} file list completed in 7s, found 220 files... Sep 30 03:31:28 root maldet(12207): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 30 03:31:28 root maldet(12207): {scan} scan of (220 files) in progress... Sep 30 03:31:46 root maldet(12207): {hit} malware hit {YARA}php_in_image found for /home/bpassoc/public_html/Panel@bpasso/documents/11.php Sep 30 03:31:46 root maldet(12207): {quar} malware quarantined from '/home/bpassoc/public_html/Panel@bpasso/documents/11.php' to '/usr/local/maldetect/quarantine/11.php.79332135' Sep 30 03:31:46 root maldet(12207): {hit} malware hit {YARA}php_in_image found for /home/bpassoc/public_html/Panel@bpasso/documents/13.jpeg Sep 30 03:31:46 root maldet(12207): {quar} malware quarantined from '/home/bpassoc/public_html/Panel@bpasso/documents/13.jpeg' to '/usr/local/maldetect/quarantine/13.jpeg.219651933' Sep 30 03:31:46 root maldet(12207): {hit} malware hit {HEX}php.gzbase64.inject.452 found for /home/bpassoc/public_html/js/del/vendor/mun.php Sep 30 03:31:46 root maldet(12207): {quar} malware quarantined from '/home/bpassoc/public_html/js/del/vendor/mun.php' to '/usr/local/maldetect/quarantine/mun.php.216684091' Sep 30 03:31:46 root maldet(12207): {hit} malware hit {HEX}php.inject.miner2a2.485 found for /home/onlinecfo/public_html/wp-content/404CPH/pguptac1-WHMCS-manager.txt404/.291d60d3.ico Sep 30 03:31:46 root maldet(12207): {quar} malware quarantined from '/home/onlinecfo/public_html/wp-content/404CPH/pguptac1-WHMCS-manager.txt404/.291d60d3.ico' to '/usr/local/maldetect/quarantine/.291d60d3.ico.165645089' Sep 30 03:31:46 root maldet(12207): {scan} scan completed on : files 220, malware hits 4, cleaned hits 0, time 25s Sep 30 03:31:46 root maldet(12207): {scan} scan report saved, to view run: maldet --report 220930-0331.12207 Oct 01 03:51:39 root maldet(10449): {update} checking for available updates... Oct 01 03:51:39 root maldet(10449): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 01 03:51:39 root maldet(10449): {update} hashing install files and checking against server... Oct 01 03:51:41 root maldet(10449): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 01 03:51:41 root maldet(10449): {update} latest version already installed. Oct 01 03:51:41 root maldet(10591): {sigup} performing signature update check... Oct 01 03:51:41 root maldet(10591): {sigup} local signature set is version 202209283161215 Oct 01 03:51:42 root maldet(10591): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 01 03:51:42 root maldet(10591): {sigup} latest signature set already installed Oct 01 03:51:42 root maldet(10717): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 01 03:51:43 root maldet(10717): {scan} signatures loaded: 17278 (14455 MD5 | 2040 HEX | 783 YARA | 0 USER) Oct 01 03:51:43 root maldet(10717): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 01 03:51:43 root maldet(10717): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 01 03:51:43 root maldet(10717): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 01 03:51:50 root maldet(10717): {scan} file list completed in 7s, found 258 files... Oct 01 03:51:50 root maldet(10717): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 01 03:51:50 root maldet(10717): {scan} scan of (258 files) in progress... Oct 01 03:52:03 root maldet(10717): {hit} malware hit {YARA}spam_mailer found for /home/winnergears/public_html/zerion.php Oct 01 03:52:03 root maldet(10717): {quar} malware quarantined from '/home/winnergears/public_html/zerion.php' to '/usr/local/maldetect/quarantine/zerion.php.1110332377' Oct 01 03:52:03 root maldet(10717): {scan} scan completed on : files 258, malware hits 1, cleaned hits 0, time 21s Oct 01 03:52:03 root maldet(10717): {scan} scan report saved, to view run: maldet --report 221001-0351.10717 Oct 02 03:37:04 root maldet(19524): {update} checking for available updates... Oct 02 03:37:04 root maldet(19524): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 02 03:37:04 root maldet(19524): {update} hashing install files and checking against server... Oct 02 03:37:04 root maldet(19524): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 02 03:37:04 root maldet(19524): {update} latest version already installed. Oct 02 03:37:04 root maldet(19685): {sigup} performing signature update check... Oct 02 03:37:04 root maldet(19685): {sigup} local signature set is version 202209283161215 Oct 02 03:37:05 root maldet(19685): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 02 03:37:05 root maldet(19685): {sigup} new signature set 202210013836555 available Oct 02 03:37:05 root maldet(19685): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 02 03:37:05 root maldet(19685): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 02 03:37:05 root maldet(19685): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 02 03:37:05 root maldet(19685): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 02 03:37:05 root maldet(19685): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 02 03:37:05 root maldet(19685): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 02 03:37:05 root maldet(19685): {sigup} verified md5sum of maldet-sigpack.tgz Oct 02 03:37:06 root maldet(19685): {sigup} unpacked and installed maldet-sigpack.tgz Oct 02 03:37:06 root maldet(19685): {sigup} verified md5sum of maldet-clean.tgz Oct 02 03:37:06 root maldet(19685): {sigup} unpacked and installed maldet-clean.tgz Oct 02 03:37:06 root maldet(19685): {sigup} signature set update completed Oct 02 03:37:06 root maldet(19685): {sigup} 17278 signatures (14455 MD5 | 2040 HEX | 783 YARA | 0 USER) Oct 02 03:37:06 root maldet(19948): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 02 03:37:06 root maldet(19948): {scan} signatures loaded: 17278 (14455 MD5 | 2040 HEX | 783 YARA | 0 USER) Oct 02 03:37:06 root maldet(19948): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 02 03:37:06 root maldet(19948): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 02 03:37:06 root maldet(19948): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 02 03:37:13 root maldet(19948): {scan} file list completed in 7s, found 135 files... Oct 02 03:37:13 root maldet(19948): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 02 03:37:13 root maldet(19948): {scan} scan of (135 files) in progress... Oct 02 03:37:27 root maldet(19948): {hit} malware hit {HEX}php.inject.miner2a2.485 found for /home/onlinecfo/public_html/wp-content/404CPH/shrishtioverseas-myconf-cPanel.txt404/.4eb82cb2.ico Oct 02 03:37:27 root maldet(19948): {quar} malware quarantined from '/home/onlinecfo/public_html/wp-content/404CPH/shrishtioverseas-myconf-cPanel.txt404/.4eb82cb2.ico' to '/usr/local/maldetect/quarantine/.4eb82cb2.ico.921116603' Oct 02 03:37:27 root maldet(19948): {scan} scan completed on : files 135, malware hits 1, cleaned hits 0, time 21s Oct 02 03:37:27 root maldet(19948): {scan} scan report saved, to view run: maldet --report 221002-0337.19948 Oct 03 03:11:24 root maldet(32320): {update} checking for available updates... Oct 03 03:11:24 root maldet(32320): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 03 03:11:24 root maldet(32320): {update} hashing install files and checking against server... Oct 03 03:11:25 root maldet(32320): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 03 03:11:25 root maldet(32320): {update} latest version already installed. Oct 03 03:11:25 root maldet(32468): {sigup} performing signature update check... Oct 03 03:11:25 root maldet(32468): {sigup} local signature set is version 202210013836555 Oct 03 03:11:25 root maldet(32468): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 03 03:11:25 root maldet(32468): {sigup} latest signature set already installed Oct 03 03:11:26 root maldet(32591): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 03 03:11:26 root maldet(32591): {scan} signatures loaded: 17278 (14455 MD5 | 2040 HEX | 783 YARA | 0 USER) Oct 03 03:11:26 root maldet(32591): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 03 03:11:26 root maldet(32591): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 03 03:11:26 root maldet(32591): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 03 03:11:33 root maldet(32591): {scan} file list completed in 7s, found 99 files... Oct 03 03:11:33 root maldet(32591): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 03 03:11:33 root maldet(32591): {scan} scan of (99 files) in progress... Oct 03 03:11:45 root maldet(32591): {scan} scan completed on : files 99, malware hits 0, cleaned hits 0, time 19s Oct 03 03:11:45 root maldet(32591): {scan} scan report saved, to view run: maldet --report 221003-0311.32591 Oct 04 03:43:29 root maldet(14218): {update} checking for available updates... Oct 04 03:43:29 root maldet(14218): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 04 03:43:29 root maldet(14218): {update} hashing install files and checking against server... Oct 04 03:43:30 root maldet(14218): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 04 03:43:30 root maldet(14218): {update} latest version already installed. Oct 04 03:43:30 root maldet(14358): {sigup} performing signature update check... Oct 04 03:43:30 root maldet(14358): {sigup} local signature set is version 202210013836555 Oct 04 03:43:30 root maldet(14358): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 04 03:43:30 root maldet(14358): {sigup} latest signature set already installed Oct 04 03:43:31 root maldet(14479): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 04 03:43:32 root maldet(14479): {scan} signatures loaded: 17278 (14455 MD5 | 2040 HEX | 783 YARA | 0 USER) Oct 04 03:43:32 root maldet(14479): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 04 03:43:32 root maldet(14479): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 04 03:43:32 root maldet(14479): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 04 03:43:39 root maldet(14479): {scan} file list completed in 7s, found 146 files... Oct 04 03:43:39 root maldet(14479): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 04 03:43:39 root maldet(14479): {scan} scan of (146 files) in progress... Oct 04 03:43:53 root maldet(14479): {hit} malware hit {HEX}php.cpanel.d0mains.382 found for /home/aftptarun/public_html/mari.php Oct 04 03:43:53 root maldet(14479): {quar} malware quarantined from '/home/aftptarun/public_html/mari.php' to '/usr/local/maldetect/quarantine/mari.php.2828814549' Oct 04 03:43:53 root maldet(14479): {scan} scan completed on : files 146, malware hits 1, cleaned hits 0, time 22s Oct 04 03:43:53 root maldet(14479): {scan} scan report saved, to view run: maldet --report 221004-0343.14479 Oct 05 03:44:15 root maldet(23235): {update} checking for available updates... Oct 05 03:44:15 root maldet(23235): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 05 03:44:15 root maldet(23235): {update} hashing install files and checking against server... Oct 05 03:44:16 root maldet(23235): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 05 03:44:16 root maldet(23235): {update} latest version already installed. Oct 05 03:44:16 root maldet(23374): {sigup} performing signature update check... Oct 05 03:44:16 root maldet(23374): {sigup} local signature set is version 202210013836555 Oct 05 03:44:16 root maldet(23374): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 05 03:44:16 root maldet(23374): {sigup} new signature set 20221004322644 available Oct 05 03:44:16 root maldet(23374): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 05 03:44:16 root maldet(23374): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 05 03:44:16 root maldet(23374): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 05 03:44:16 root maldet(23374): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 05 03:44:17 root maldet(23374): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 05 03:44:17 root maldet(23374): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 05 03:44:17 root maldet(23374): {sigup} verified md5sum of maldet-sigpack.tgz Oct 05 03:44:17 root maldet(23374): {sigup} unpacked and installed maldet-sigpack.tgz Oct 05 03:44:17 root maldet(23374): {sigup} verified md5sum of maldet-clean.tgz Oct 05 03:44:17 root maldet(23374): {sigup} unpacked and installed maldet-clean.tgz Oct 05 03:44:17 root maldet(23374): {sigup} signature set update completed Oct 05 03:44:17 root maldet(23374): {sigup} 17278 signatures (14455 MD5 | 2040 HEX | 783 YARA | 0 USER) Oct 05 03:44:17 root maldet(23654): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 05 03:44:18 root maldet(23654): {scan} signatures loaded: 17278 (14455 MD5 | 2040 HEX | 783 YARA | 0 USER) Oct 05 03:44:18 root maldet(23654): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 05 03:44:18 root maldet(23654): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 05 03:44:18 root maldet(23654): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 05 03:44:27 root maldet(23654): {scan} file list completed in 9s, found 253 files... Oct 05 03:44:27 root maldet(23654): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 05 03:44:27 root maldet(23654): {scan} scan of (253 files) in progress... Oct 05 03:44:42 root maldet(23654): {hit} malware hit {HEX}php.inject.miner2a2.485 found for /home/onlinecfo/public_html/wp-content/404CPH/taxguruk-WHMCS-whm.txt404/.57312957.ico Oct 05 03:44:42 root maldet(23654): {quar} malware quarantined from '/home/onlinecfo/public_html/wp-content/404CPH/taxguruk-WHMCS-whm.txt404/.57312957.ico' to '/usr/local/maldetect/quarantine/.57312957.ico.1707512221' Oct 05 03:44:42 root maldet(23654): {scan} scan completed on : files 253, malware hits 1, cleaned hits 0, time 25s Oct 05 03:44:42 root maldet(23654): {scan} scan report saved, to view run: maldet --report 221005-0344.23654 Oct 06 03:46:06 root maldet(1679): {update} checking for available updates... Oct 06 03:46:06 root maldet(1679): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 06 03:46:06 root maldet(1679): {update} hashing install files and checking against server... Oct 06 03:46:06 root maldet(1679): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 06 03:46:06 root maldet(1679): {update} latest version already installed. Oct 06 03:46:06 root maldet(1823): {sigup} performing signature update check... Oct 06 03:46:06 root maldet(1823): {sigup} local signature set is version 20221004322644 Oct 06 03:46:07 root maldet(1823): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 06 03:46:07 root maldet(1823): {sigup} new signature set 20221005971367 available Oct 06 03:46:07 root maldet(1823): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 06 03:46:07 root maldet(1823): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 06 03:46:07 root maldet(1823): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 06 03:46:07 root maldet(1823): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 06 03:46:07 root maldet(1823): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 06 03:46:07 root maldet(1823): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 06 03:46:08 root maldet(1823): {sigup} verified md5sum of maldet-sigpack.tgz Oct 06 03:46:08 root maldet(1823): {sigup} unpacked and installed maldet-sigpack.tgz Oct 06 03:46:08 root maldet(1823): {sigup} verified md5sum of maldet-clean.tgz Oct 06 03:46:08 root maldet(1823): {sigup} unpacked and installed maldet-clean.tgz Oct 06 03:46:08 root maldet(1823): {sigup} signature set update completed Oct 06 03:46:08 root maldet(1823): {sigup} 17279 signatures (14455 MD5 | 2041 HEX | 783 YARA | 0 USER) Oct 06 03:46:08 root maldet(2077): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 06 03:46:08 root maldet(2077): {scan} signatures loaded: 17279 (14455 MD5 | 2041 HEX | 783 YARA | 0 USER) Oct 06 03:46:08 root maldet(2077): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 06 03:46:08 root maldet(2077): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 06 03:46:08 root maldet(2077): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 06 03:46:16 root maldet(2077): {scan} file list completed in 8s, found 155 files... Oct 06 03:46:16 root maldet(2077): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 06 03:46:16 root maldet(2077): {scan} scan of (155 files) in progress... Oct 06 03:46:30 root maldet(2077): {scan} scan completed on : files 155, malware hits 0, cleaned hits 0, time 22s Oct 06 03:46:30 root maldet(2077): {scan} scan report saved, to view run: maldet --report 221006-0346.2077 Oct 07 03:11:09 root maldet(25291): {update} checking for available updates... Oct 07 03:11:10 root maldet(25291): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 07 03:11:10 root maldet(25291): {update} hashing install files and checking against server... Oct 07 03:11:10 root maldet(25291): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 07 03:11:10 root maldet(25291): {update} latest version already installed. Oct 07 03:11:10 root maldet(25442): {sigup} performing signature update check... Oct 07 03:11:10 root maldet(25442): {sigup} local signature set is version 20221005971367 Oct 07 03:11:10 root maldet(25442): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 07 03:11:10 root maldet(25442): {sigup} latest signature set already installed Oct 07 03:11:10 root maldet(25562): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 07 03:11:11 root maldet(25562): {scan} signatures loaded: 17279 (14455 MD5 | 2041 HEX | 783 YARA | 0 USER) Oct 07 03:11:11 root maldet(25562): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 07 03:11:11 root maldet(25562): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 07 03:11:11 root maldet(25562): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 07 03:11:17 root maldet(25562): {scan} file list completed in 6s, found 208 files... Oct 07 03:11:17 root maldet(25562): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 07 03:11:17 root maldet(25562): {scan} scan of (208 files) in progress... Oct 07 03:11:30 root maldet(25562): {hit} malware hit {HEX}php.inject.miner2a2.485 found for /home/onlinecfo/public_html/wp-content/404CPH/vedbansal-Joomla-demo-public_html.txt404/.a67ce841.ico Oct 07 03:11:30 root maldet(25562): {quar} malware quarantined from '/home/onlinecfo/public_html/wp-content/404CPH/vedbansal-Joomla-demo-public_html.txt404/.a67ce841.ico' to '/usr/local/maldetect/quarantine/.a67ce841.ico.1610313789' Oct 07 03:11:30 root maldet(25562): {scan} scan completed on : files 208, malware hits 1, cleaned hits 0, time 20s Oct 07 03:11:30 root maldet(25562): {scan} scan report saved, to view run: maldet --report 221007-0311.25562 Oct 08 03:34:52 root maldet(9771): {update} checking for available updates... Oct 08 03:34:53 root maldet(9771): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 08 03:34:53 root maldet(9771): {update} hashing install files and checking against server... Oct 08 03:34:53 root maldet(9771): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 08 03:34:53 root maldet(9771): {update} latest version already installed. Oct 08 03:34:53 root maldet(9930): {sigup} performing signature update check... Oct 08 03:34:53 root maldet(9930): {sigup} local signature set is version 20221005971367 Oct 08 03:34:54 root maldet(9930): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 08 03:34:54 root maldet(9930): {sigup} new signature set 202210071615806 available Oct 08 03:34:54 root maldet(9930): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 08 03:34:54 root maldet(9930): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 08 03:34:54 root maldet(9930): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 08 03:34:54 root maldet(9930): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 08 03:34:54 root maldet(9930): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 08 03:34:54 root maldet(9930): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 08 03:34:54 root maldet(9930): {sigup} verified md5sum of maldet-sigpack.tgz Oct 08 03:34:55 root maldet(9930): {sigup} unpacked and installed maldet-sigpack.tgz Oct 08 03:34:55 root maldet(9930): {sigup} verified md5sum of maldet-clean.tgz Oct 08 03:34:55 root maldet(9930): {sigup} unpacked and installed maldet-clean.tgz Oct 08 03:34:55 root maldet(9930): {sigup} signature set update completed Oct 08 03:34:55 root maldet(9930): {sigup} 17279 signatures (14455 MD5 | 2041 HEX | 783 YARA | 0 USER) Oct 08 03:34:55 root maldet(10179): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 08 03:34:55 root maldet(10179): {scan} signatures loaded: 17279 (14455 MD5 | 2041 HEX | 783 YARA | 0 USER) Oct 08 03:34:55 root maldet(10179): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 08 03:34:55 root maldet(10179): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 08 03:34:55 root maldet(10179): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 08 03:35:03 root maldet(10179): {scan} file list completed in 8s, found 824 files... Oct 08 03:35:03 root maldet(10179): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 08 03:35:03 root maldet(10179): {scan} scan of (824 files) in progress... Oct 08 03:35:19 root maldet(10179): {scan} scan completed on : files 824, malware hits 0, cleaned hits 0, time 24s Oct 08 03:35:19 root maldet(10179): {scan} scan report saved, to view run: maldet --report 221008-0334.10179 Oct 09 03:40:15 root maldet(4247): {update} checking for available updates... Oct 09 03:40:16 root maldet(4247): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 09 03:40:16 root maldet(4247): {update} hashing install files and checking against server... Oct 09 03:40:16 root maldet(4247): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 09 03:40:16 root maldet(4247): {update} latest version already installed. Oct 09 03:40:16 root maldet(4391): {sigup} performing signature update check... Oct 09 03:40:16 root maldet(4391): {sigup} local signature set is version 202210071615806 Oct 09 03:40:16 root maldet(4391): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 09 03:40:16 root maldet(4391): {sigup} latest signature set already installed Oct 09 03:40:16 root maldet(4507): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 09 03:40:17 root maldet(4507): {scan} signatures loaded: 17279 (14455 MD5 | 2041 HEX | 783 YARA | 0 USER) Oct 09 03:40:17 root maldet(4507): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 09 03:40:17 root maldet(4507): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 09 03:40:17 root maldet(4507): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 09 03:40:24 root maldet(4507): {scan} file list completed in 7s, found 197 files... Oct 09 03:40:24 root maldet(4507): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 09 03:40:24 root maldet(4507): {scan} scan of (197 files) in progress... Oct 09 03:40:39 root maldet(4507): {hit} malware hit {HEX}php.inject.miner2a2.485 found for /home/onlinecfo/public_html/wp-content/404CPH/gstonline-OpenCart-store-public_html.txt404/.b6cb5627.ico Oct 09 03:40:39 root maldet(4507): {quar} malware quarantined from '/home/onlinecfo/public_html/wp-content/404CPH/gstonline-OpenCart-store-public_html.txt404/.b6cb5627.ico' to '/usr/local/maldetect/quarantine/.b6cb5627.ico.2664521559' Oct 09 03:40:40 root maldet(4507): {scan} scan completed on : files 197, malware hits 1, cleaned hits 0, time 23s Oct 09 03:40:40 root maldet(4507): {scan} scan report saved, to view run: maldet --report 221009-0340.4507 Oct 10 03:20:59 root maldet(3430): {update} checking for available updates... Oct 10 03:20:59 root maldet(3430): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 10 03:20:59 root maldet(3430): {update} hashing install files and checking against server... Oct 10 03:20:59 root maldet(3430): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 10 03:20:59 root maldet(3430): {update} latest version already installed. Oct 10 03:20:59 root maldet(3575): {sigup} performing signature update check... Oct 10 03:20:59 root maldet(3575): {sigup} local signature set is version 202210071615806 Oct 10 03:21:00 root maldet(3575): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 10 03:21:00 root maldet(3575): {sigup} latest signature set already installed Oct 10 03:21:00 root maldet(3689): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 10 03:21:00 root maldet(3689): {scan} signatures loaded: 17279 (14455 MD5 | 2041 HEX | 783 YARA | 0 USER) Oct 10 03:21:00 root maldet(3689): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 10 03:21:00 root maldet(3689): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 10 03:21:00 root maldet(3689): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 10 03:21:07 root maldet(3689): {scan} file list completed in 7s, found 110 files... Oct 10 03:21:07 root maldet(3689): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 10 03:21:07 root maldet(3689): {scan} scan of (110 files) in progress... Oct 10 03:21:21 root maldet(3689): {scan} scan completed on : files 110, malware hits 0, cleaned hits 0, time 21s Oct 10 03:21:21 root maldet(3689): {scan} scan report saved, to view run: maldet --report 221010-0321.3689 Oct 11 03:46:48 root maldet(29989): {update} checking for available updates... Oct 11 03:46:49 root maldet(29989): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 11 03:46:49 root maldet(29989): {update} hashing install files and checking against server... Oct 11 03:46:49 root maldet(29989): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 11 03:46:49 root maldet(29989): {update} latest version already installed. Oct 11 03:46:49 root maldet(30134): {sigup} performing signature update check... Oct 11 03:46:49 root maldet(30134): {sigup} local signature set is version 202210071615806 Oct 11 03:46:49 root maldet(30134): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 11 03:46:49 root maldet(30134): {sigup} new signature set 20221010480686 available Oct 11 03:46:49 root maldet(30134): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 11 03:46:50 root maldet(30134): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 11 03:46:50 root maldet(30134): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 11 03:46:50 root maldet(30134): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 11 03:46:50 root maldet(30134): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 11 03:46:50 root maldet(30134): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 11 03:46:50 root maldet(30134): {sigup} verified md5sum of maldet-sigpack.tgz Oct 11 03:46:51 root maldet(30134): {sigup} unpacked and installed maldet-sigpack.tgz Oct 11 03:46:51 root maldet(30134): {sigup} verified md5sum of maldet-clean.tgz Oct 11 03:46:51 root maldet(30134): {sigup} unpacked and installed maldet-clean.tgz Oct 11 03:46:51 root maldet(30134): {sigup} signature set update completed Oct 11 03:46:51 root maldet(30134): {sigup} 17279 signatures (14455 MD5 | 2041 HEX | 783 YARA | 0 USER) Oct 11 03:46:51 root maldet(30399): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 11 03:46:51 root maldet(30399): {scan} signatures loaded: 17279 (14455 MD5 | 2041 HEX | 783 YARA | 0 USER) Oct 11 03:46:51 root maldet(30399): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 11 03:46:51 root maldet(30399): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 11 03:46:51 root maldet(30399): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 11 03:46:58 root maldet(30399): {scan} file list completed in 7s, found 132 files... Oct 11 03:46:58 root maldet(30399): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 11 03:46:58 root maldet(30399): {scan} scan of (132 files) in progress... Oct 11 03:47:12 root maldet(30399): {hit} malware hit {HEX}php.inject.miner2a2.485 found for /home/onlinecfo/public_html/wp-content/404CPH/saawariy-WHMCS-domains.txt404/.5c1fa819.ico Oct 11 03:47:12 root maldet(30399): {quar} malware quarantined from '/home/onlinecfo/public_html/wp-content/404CPH/saawariy-WHMCS-domains.txt404/.5c1fa819.ico' to '/usr/local/maldetect/quarantine/.5c1fa819.ico.292883714' Oct 11 03:47:12 root maldet(30399): {scan} scan completed on : files 132, malware hits 1, cleaned hits 0, time 21s Oct 11 03:47:12 root maldet(30399): {scan} scan report saved, to view run: maldet --report 221011-0346.30399 Oct 12 03:27:37 root maldet(27446): {update} checking for available updates... Oct 12 03:27:38 root maldet(27446): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 12 03:27:38 root maldet(27446): {update} hashing install files and checking against server... Oct 12 03:27:38 root maldet(27446): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 12 03:27:38 root maldet(27446): {update} latest version already installed. Oct 12 03:27:38 root maldet(27590): {sigup} performing signature update check... Oct 12 03:27:38 root maldet(27590): {sigup} local signature set is version 20221010480686 Oct 12 03:27:38 root maldet(27590): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 12 03:27:38 root maldet(27590): {sigup} new signature set 202210111713840 available Oct 12 03:27:38 root maldet(27590): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 12 03:27:39 root maldet(27590): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 12 03:27:39 root maldet(27590): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 12 03:27:39 root maldet(27590): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 12 03:27:39 root maldet(27590): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 12 03:27:39 root maldet(27590): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 12 03:27:39 root maldet(27590): {sigup} verified md5sum of maldet-sigpack.tgz Oct 12 03:27:39 root maldet(27590): {sigup} unpacked and installed maldet-sigpack.tgz Oct 12 03:27:39 root maldet(27590): {sigup} verified md5sum of maldet-clean.tgz Oct 12 03:27:39 root maldet(27590): {sigup} unpacked and installed maldet-clean.tgz Oct 12 03:27:39 root maldet(27590): {sigup} signature set update completed Oct 12 03:27:39 root maldet(27590): {sigup} 17286 signatures (14457 MD5 | 2046 HEX | 783 YARA | 0 USER) Oct 12 03:27:39 root maldet(27876): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 12 03:27:40 root maldet(27876): {scan} signatures loaded: 17286 (14457 MD5 | 2046 HEX | 783 YARA | 0 USER) Oct 12 03:27:40 root maldet(27876): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 12 03:27:40 root maldet(27876): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 12 03:27:40 root maldet(27876): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 12 03:27:47 root maldet(27876): {scan} file list completed in 7s, found 116 files... Oct 12 03:27:47 root maldet(27876): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 12 03:27:47 root maldet(27876): {scan} scan of (116 files) in progress... Oct 12 03:27:59 root maldet(27876): {scan} scan completed on : files 116, malware hits 0, cleaned hits 0, time 20s Oct 12 03:27:59 root maldet(27876): {scan} scan report saved, to view run: maldet --report 221012-0327.27876 Oct 13 03:21:50 root maldet(28230): {update} checking for available updates... Oct 13 03:21:50 root maldet(28230): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 13 03:21:50 root maldet(28230): {update} hashing install files and checking against server... Oct 13 03:21:51 root maldet(28230): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 13 03:21:51 root maldet(28230): {update} latest version already installed. Oct 13 03:21:51 root maldet(28373): {sigup} performing signature update check... Oct 13 03:21:51 root maldet(28373): {sigup} local signature set is version 202210111713840 Oct 13 03:21:51 root maldet(28373): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 13 03:21:51 root maldet(28373): {sigup} latest signature set already installed Oct 13 03:21:51 root maldet(28484): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 13 03:21:51 root maldet(28484): {scan} signatures loaded: 17286 (14457 MD5 | 2046 HEX | 783 YARA | 0 USER) Oct 13 03:21:51 root maldet(28484): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 13 03:21:51 root maldet(28484): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 13 03:21:51 root maldet(28484): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 13 03:21:58 root maldet(28484): {scan} file list completed in 7s, found 122 files... Oct 13 03:21:58 root maldet(28484): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 13 03:21:58 root maldet(28484): {scan} scan of (122 files) in progress... Oct 13 03:22:12 root maldet(28484): {scan} scan completed on : files 122, malware hits 0, cleaned hits 0, time 21s Oct 13 03:22:12 root maldet(28484): {scan} scan report saved, to view run: maldet --report 221013-0321.28484 Oct 14 03:17:17 root maldet(19174): {update} checking for available updates... Oct 14 03:17:17 root maldet(19174): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 14 03:17:17 root maldet(19174): {update} hashing install files and checking against server... Oct 14 03:17:18 root maldet(19174): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 14 03:17:18 root maldet(19174): {update} latest version already installed. Oct 14 03:17:18 root maldet(19310): {sigup} performing signature update check... Oct 14 03:17:18 root maldet(19310): {sigup} local signature set is version 202210111713840 Oct 14 03:17:18 root maldet(19310): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 14 03:17:18 root maldet(19310): {sigup} new signature set 202210132353814 available Oct 14 03:17:18 root maldet(19310): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 14 03:17:19 root maldet(19310): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 14 03:17:19 root maldet(19310): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 14 03:17:19 root maldet(19310): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 14 03:17:19 root maldet(19310): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 14 03:17:19 root maldet(19310): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 14 03:17:19 root maldet(19310): {sigup} verified md5sum of maldet-sigpack.tgz Oct 14 03:17:19 root maldet(19310): {sigup} unpacked and installed maldet-sigpack.tgz Oct 14 03:17:19 root maldet(19310): {sigup} verified md5sum of maldet-clean.tgz Oct 14 03:17:19 root maldet(19310): {sigup} unpacked and installed maldet-clean.tgz Oct 14 03:17:19 root maldet(19310): {sigup} signature set update completed Oct 14 03:17:19 root maldet(19310): {sigup} 17286 signatures (14457 MD5 | 2046 HEX | 783 YARA | 0 USER) Oct 14 03:17:20 root maldet(19554): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 14 03:17:20 root maldet(19554): {scan} signatures loaded: 17286 (14457 MD5 | 2046 HEX | 783 YARA | 0 USER) Oct 14 03:17:20 root maldet(19554): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 14 03:17:20 root maldet(19554): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 14 03:17:20 root maldet(19554): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 14 03:17:27 root maldet(19554): {scan} file list completed in 7s, found 275 files... Oct 14 03:17:27 root maldet(19554): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 14 03:17:27 root maldet(19554): {scan} scan of (275 files) in progress... Oct 14 03:17:43 root maldet(19554): {hit} malware hit {HEX}php.inject.miner2a2.489 found for /home/onlinecfo/public_html/wp-content/404CPH/mahabirconstruct-WHMCS-client.txt404/.8e496899.ico Oct 14 03:17:43 root maldet(19554): {quar} malware quarantined from '/home/onlinecfo/public_html/wp-content/404CPH/mahabirconstruct-WHMCS-client.txt404/.8e496899.ico' to '/usr/local/maldetect/quarantine/.8e496899.ico.20358142' Oct 14 03:17:43 root maldet(19554): {scan} scan completed on : files 275, malware hits 1, cleaned hits 0, time 23s Oct 14 03:17:43 root maldet(19554): {scan} scan report saved, to view run: maldet --report 221014-0317.19554 Oct 15 03:40:29 root maldet(20406): {update} checking for available updates... Oct 15 03:40:29 root maldet(20406): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 15 03:40:29 root maldet(20406): {update} hashing install files and checking against server... Oct 15 03:40:29 root maldet(20406): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 15 03:40:29 root maldet(20406): {update} latest version already installed. Oct 15 03:40:29 root maldet(20549): {sigup} performing signature update check... Oct 15 03:40:29 root maldet(20549): {sigup} local signature set is version 202210132353814 Oct 15 03:40:29 root maldet(20549): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 15 03:40:29 root maldet(20549): {sigup} latest signature set already installed Oct 15 03:40:30 root maldet(20693): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 15 03:40:30 root maldet(20693): {scan} signatures loaded: 17286 (14457 MD5 | 2046 HEX | 783 YARA | 0 USER) Oct 15 03:40:30 root maldet(20693): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 15 03:40:30 root maldet(20693): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 15 03:40:30 root maldet(20693): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 15 03:40:37 root maldet(20693): {scan} file list completed in 7s, found 109 files... Oct 15 03:40:37 root maldet(20693): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 15 03:40:37 root maldet(20693): {scan} scan of (109 files) in progress... Oct 15 03:40:50 root maldet(20693): {scan} scan completed on : files 109, malware hits 0, cleaned hits 0, time 19s Oct 15 03:40:50 root maldet(20693): {scan} scan report saved, to view run: maldet --report 221015-0340.20693 Oct 16 03:35:10 root maldet(11848): {update} checking for available updates... Oct 16 03:35:10 root maldet(11848): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 16 03:35:10 root maldet(11848): {update} hashing install files and checking against server... Oct 16 03:35:10 root maldet(11848): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 16 03:35:10 root maldet(11848): {update} latest version already installed. Oct 16 03:35:10 root maldet(11993): {sigup} performing signature update check... Oct 16 03:35:10 root maldet(11993): {sigup} local signature set is version 202210132353814 Oct 16 03:35:10 root maldet(11993): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 16 03:35:10 root maldet(11993): {sigup} latest signature set already installed Oct 16 03:35:11 root maldet(12105): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 16 03:35:11 root maldet(12105): {scan} signatures loaded: 17286 (14457 MD5 | 2046 HEX | 783 YARA | 0 USER) Oct 16 03:35:11 root maldet(12105): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 16 03:35:11 root maldet(12105): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 16 03:35:11 root maldet(12105): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 16 03:35:18 root maldet(12105): {scan} file list completed in 7s, found 150 files... Oct 16 03:35:18 root maldet(12105): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 16 03:35:18 root maldet(12105): {scan} scan of (150 files) in progress... Oct 16 03:35:37 root maldet(12105): {hit} malware hit {HEX}php.inject.miner2a2.489 found for /home/onlinecfo/public_html/wp-content/404CPH/abhayagrawal-OpenCart-new-public_html.txt404/.d435cff2.ico Oct 16 03:35:37 root maldet(12105): {quar} malware quarantined from '/home/onlinecfo/public_html/wp-content/404CPH/abhayagrawal-OpenCart-new-public_html.txt404/.d435cff2.ico' to '/usr/local/maldetect/quarantine/.d435cff2.ico.1426127739' Oct 16 03:35:37 root maldet(12105): {scan} scan completed on : files 150, malware hits 1, cleaned hits 0, time 26s Oct 16 03:35:37 root maldet(12105): {scan} scan report saved, to view run: maldet --report 221016-0335.12105 Oct 17 03:58:08 root maldet(15238): {update} checking for available updates... Oct 17 03:58:09 root maldet(15238): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 17 03:58:09 root maldet(15238): {update} hashing install files and checking against server... Oct 17 03:58:09 root maldet(15238): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 17 03:58:09 root maldet(15238): {update} latest version already installed. Oct 17 03:58:09 root maldet(15381): {sigup} performing signature update check... Oct 17 03:58:09 root maldet(15381): {sigup} local signature set is version 202210132353814 Oct 17 03:58:09 root maldet(15381): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 17 03:58:09 root maldet(15381): {sigup} new signature set 202210163213603 available Oct 17 03:58:09 root maldet(15381): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 17 03:58:09 root maldet(15381): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 17 03:58:10 root maldet(15381): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 17 03:58:10 root maldet(15381): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 17 03:58:10 root maldet(15381): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 17 03:58:10 root maldet(15381): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 17 03:58:10 root maldet(15381): {sigup} verified md5sum of maldet-sigpack.tgz Oct 17 03:58:12 root maldet(15381): {sigup} unpacked and installed maldet-sigpack.tgz Oct 17 03:58:12 root maldet(15381): {sigup} verified md5sum of maldet-clean.tgz Oct 17 03:58:12 root maldet(15381): {sigup} unpacked and installed maldet-clean.tgz Oct 17 03:58:12 root maldet(15381): {sigup} signature set update completed Oct 17 03:58:13 root maldet(15381): {sigup} 17287 signatures (14458 MD5 | 2046 HEX | 783 YARA | 0 USER) Oct 17 03:58:13 root maldet(15661): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 17 03:58:13 root maldet(15661): {scan} signatures loaded: 17287 (14458 MD5 | 2046 HEX | 783 YARA | 0 USER) Oct 17 03:58:13 root maldet(15661): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 17 03:58:13 root maldet(15661): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 17 03:58:13 root maldet(15661): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 17 03:58:22 root maldet(15661): {scan} file list completed in 9s, found 28022 files... Oct 17 03:58:22 root maldet(15661): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 17 03:58:22 root maldet(15661): {scan} scan of (28022 files) in progress... Oct 17 04:00:00 root maldet(15661): {scan} scan completed on : files 28022, malware hits 0, cleaned hits 0, time 107s Oct 17 04:00:00 root maldet(15661): {scan} scan report saved, to view run: maldet --report 221017-0358.15661 Oct 18 03:55:25 root maldet(10946): {update} checking for available updates... Oct 18 03:55:26 root maldet(10946): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 18 03:55:26 root maldet(10946): {update} hashing install files and checking against server... Oct 18 03:55:26 root maldet(10946): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 18 03:55:26 root maldet(10946): {update} latest version already installed. Oct 18 03:55:26 root maldet(11089): {sigup} performing signature update check... Oct 18 03:55:26 root maldet(11089): {sigup} local signature set is version 202210163213603 Oct 18 03:55:26 root maldet(11089): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 18 03:55:26 root maldet(11089): {sigup} latest signature set already installed Oct 18 03:55:26 root maldet(11203): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 18 03:55:27 root maldet(11203): {scan} signatures loaded: 17287 (14458 MD5 | 2046 HEX | 783 YARA | 0 USER) Oct 18 03:55:27 root maldet(11203): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 18 03:55:27 root maldet(11203): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 18 03:55:27 root maldet(11203): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 18 03:55:34 root maldet(11203): {scan} file list completed in 7s, found 499 files... Oct 18 03:55:34 root maldet(11203): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 18 03:55:34 root maldet(11203): {scan} scan of (499 files) in progress... Oct 18 03:55:54 root maldet(11203): {scan} scan completed on : files 499, malware hits 0, cleaned hits 0, time 28s Oct 18 03:55:54 root maldet(11203): {scan} scan report saved, to view run: maldet --report 221018-0355.11203 Oct 19 03:44:06 root maldet(10317): {update} checking for available updates... Oct 19 03:44:07 root maldet(10317): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 19 03:44:07 root maldet(10317): {update} hashing install files and checking against server... Oct 19 03:44:07 root maldet(10317): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 19 03:44:07 root maldet(10317): {update} latest version already installed. Oct 19 03:44:07 root maldet(10468): {sigup} performing signature update check... Oct 19 03:44:07 root maldet(10468): {sigup} local signature set is version 202210163213603 Oct 19 03:44:07 root maldet(10468): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 19 03:44:07 root maldet(10468): {sigup} latest signature set already installed Oct 19 03:44:07 root maldet(10606): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 19 03:44:08 root maldet(10606): {scan} signatures loaded: 17287 (14458 MD5 | 2046 HEX | 783 YARA | 0 USER) Oct 19 03:44:08 root maldet(10606): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 19 03:44:08 root maldet(10606): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 19 03:44:08 root maldet(10606): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 19 03:44:17 root maldet(10606): {scan} file list completed in 9s, found 285 files... Oct 19 03:44:17 root maldet(10606): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 19 03:44:17 root maldet(10606): {scan} scan of (285 files) in progress... Oct 19 03:44:36 root maldet(10606): {hit} malware hit {YARA}WebShell_Gamma_Web_Shell found for /home/winnergears/public_html/.mari/cpanel.X Oct 19 03:44:36 root maldet(10606): {quar} malware quarantined from '/home/winnergears/public_html/.mari/cpanel.X' to '/usr/local/maldetect/quarantine/cpanel.X.784812390' Oct 19 03:44:36 root maldet(10606): {hit} malware hit {YARA}webshell_iMHaPFtp_2 found for /home/winnergears/public_html/well-known/acme-challenge/f/a/a/j/404/cabanahotels-OpenCart-new-public_html.txt404/deletematrimonialcontent.php Oct 19 03:44:36 root maldet(10606): {quar} malware quarantined from '/home/winnergears/public_html/well-known/acme-challenge/f/a/a/j/404/cabanahotels-OpenCart-new-public_html.txt404/deletematrimonialcontent.php' to '/usr/local/maldetect/quarantine/deletematrimonialcontent.php.3152530083' Oct 19 03:44:36 root maldet(10606): {hit} malware hit {YARA}webshell_gfs_sh_r57shell_r57shell127_SnIpEr_SA_xxx found for /home/winnergears/public_html/well-known/acme-challenge/f/a/a/j/404/ssclegal-PrestaShop-prestashop.txt404/jobstatus.php Oct 19 03:44:36 root maldet(10606): {quar} malware quarantined from '/home/winnergears/public_html/well-known/acme-challenge/f/a/a/j/404/ssclegal-PrestaShop-prestashop.txt404/jobstatus.php' to '/usr/local/maldetect/quarantine/jobstatus.php.3260230854' Oct 19 03:44:36 root maldet(10606): {hit} malware hit {YARA}webshell_iMHaPFtp_2 found for /home/winnergears/public_html/well-known/acme-challenge/g/g/h/h/editproperty.php Oct 19 03:44:36 root maldet(10606): {quar} malware quarantined from '/home/winnergears/public_html/well-known/acme-challenge/g/g/h/h/editproperty.php' to '/usr/local/maldetect/quarantine/editproperty.php.1671519458' Oct 19 03:44:36 root maldet(10606): {hit} malware hit {YARA}webshell_iMHaPFtp_2 found for /home/winnergears/public_html/well-known/acme-challenge/g/i/j/a/deletewpage.php Oct 19 03:44:36 root maldet(10606): {quar} malware quarantined from '/home/winnergears/public_html/well-known/acme-challenge/g/i/j/a/deletewpage.php' to '/usr/local/maldetect/quarantine/deletewpage.php.114877632' Oct 19 03:44:36 root maldet(10606): {scan} scan completed on : files 285, malware hits 5, cleaned hits 0, time 29s Oct 19 03:44:36 root maldet(10606): {scan} scan report saved, to view run: maldet --report 221019-0344.10606 Oct 20 03:54:24 root maldet(15930): {update} checking for available updates... Oct 20 03:54:24 root maldet(15930): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 20 03:54:24 root maldet(15930): {update} hashing install files and checking against server... Oct 20 03:54:24 root maldet(15930): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 20 03:54:24 root maldet(15930): {update} latest version already installed. Oct 20 03:54:24 root maldet(16070): {sigup} performing signature update check... Oct 20 03:54:24 root maldet(16070): {sigup} local signature set is version 202210163213603 Oct 20 03:54:25 root maldet(16070): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 20 03:54:25 root maldet(16070): {sigup} new signature set 20221019335633 available Oct 20 03:54:25 root maldet(16070): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 20 03:54:25 root maldet(16070): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 20 03:54:25 root maldet(16070): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 20 03:54:25 root maldet(16070): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 20 03:54:25 root maldet(16070): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 20 03:54:26 root maldet(16070): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 20 03:54:26 root maldet(16070): {sigup} verified md5sum of maldet-sigpack.tgz Oct 20 03:54:26 root maldet(16070): {sigup} unpacked and installed maldet-sigpack.tgz Oct 20 03:54:26 root maldet(16070): {sigup} verified md5sum of maldet-clean.tgz Oct 20 03:54:26 root maldet(16070): {sigup} unpacked and installed maldet-clean.tgz Oct 20 03:54:26 root maldet(16070): {sigup} signature set update completed Oct 20 03:54:26 root maldet(16070): {sigup} 17287 signatures (14458 MD5 | 2046 HEX | 783 YARA | 0 USER) Oct 20 03:54:26 root maldet(16338): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 20 03:54:27 root maldet(16338): {scan} signatures loaded: 17287 (14458 MD5 | 2046 HEX | 783 YARA | 0 USER) Oct 20 03:54:27 root maldet(16338): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 20 03:54:27 root maldet(16338): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 20 03:54:27 root maldet(16338): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 20 03:54:34 root maldet(16338): {scan} file list completed in 7s, found 114 files... Oct 20 03:54:34 root maldet(16338): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 20 03:54:34 root maldet(16338): {scan} scan of (114 files) in progress... Oct 20 03:54:49 root maldet(16338): {scan} scan completed on : files 114, malware hits 0, cleaned hits 0, time 23s Oct 20 03:54:49 root maldet(16338): {scan} scan report saved, to view run: maldet --report 221020-0354.16338 Oct 21 03:22:53 root maldet(25879): {update} checking for available updates... Oct 21 03:22:54 root maldet(25879): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 21 03:22:54 root maldet(25879): {update} hashing install files and checking against server... Oct 21 03:22:54 root maldet(25879): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 21 03:22:54 root maldet(25879): {update} latest version already installed. Oct 21 03:22:54 root maldet(26016): {sigup} performing signature update check... Oct 21 03:22:54 root maldet(26016): {sigup} local signature set is version 20221019335633 Oct 21 03:22:54 root maldet(26016): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 21 03:22:54 root maldet(26016): {sigup} latest signature set already installed Oct 21 03:22:54 root maldet(26130): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 21 03:22:55 root maldet(26130): {scan} signatures loaded: 17287 (14458 MD5 | 2046 HEX | 783 YARA | 0 USER) Oct 21 03:22:55 root maldet(26130): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 21 03:22:55 root maldet(26130): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 21 03:22:55 root maldet(26130): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 21 03:23:01 root maldet(26130): {scan} file list completed in 6s, found 115 files... Oct 21 03:23:01 root maldet(26130): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 21 03:23:01 root maldet(26130): {scan} scan of (115 files) in progress... Oct 21 03:23:15 root maldet(26130): {scan} scan completed on : files 115, malware hits 0, cleaned hits 0, time 21s Oct 21 03:23:15 root maldet(26130): {scan} scan report saved, to view run: maldet --report 221021-0322.26130 Oct 22 03:43:24 root maldet(5085): {update} checking for available updates... Oct 22 03:43:24 root maldet(5085): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 22 03:43:24 root maldet(5085): {update} hashing install files and checking against server... Oct 22 03:43:24 root maldet(5085): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 22 03:43:24 root maldet(5085): {update} latest version already installed. Oct 22 03:43:24 root maldet(5225): {sigup} performing signature update check... Oct 22 03:43:24 root maldet(5225): {sigup} local signature set is version 20221019335633 Oct 22 03:43:25 root maldet(5225): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 22 03:43:25 root maldet(5225): {sigup} latest signature set already installed Oct 22 03:43:25 root maldet(5336): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 22 03:43:25 root maldet(5336): {scan} signatures loaded: 17287 (14458 MD5 | 2046 HEX | 783 YARA | 0 USER) Oct 22 03:43:25 root maldet(5336): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 22 03:43:25 root maldet(5336): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 22 03:43:25 root maldet(5336): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 22 03:43:32 root maldet(5336): {scan} file list completed in 7s, found 228 files... Oct 22 03:43:32 root maldet(5336): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 22 03:43:32 root maldet(5336): {scan} scan of (228 files) in progress... Oct 22 03:43:49 root maldet(5336): {scan} scan completed on : files 228, malware hits 0, cleaned hits 0, time 23s Oct 22 03:43:49 root maldet(5336): {scan} scan report saved, to view run: maldet --report 221022-0343.5336 Oct 23 03:57:33 root maldet(19507): {update} checking for available updates... Oct 23 03:57:33 root maldet(19507): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 23 03:57:33 root maldet(19507): {update} hashing install files and checking against server... Oct 23 03:57:33 root maldet(19507): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 23 03:57:33 root maldet(19507): {update} latest version already installed. Oct 23 03:57:33 root maldet(19665): {sigup} performing signature update check... Oct 23 03:57:33 root maldet(19665): {sigup} local signature set is version 20221019335633 Oct 23 03:57:34 root maldet(19665): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 23 03:57:34 root maldet(19665): {sigup} new signature set 202210221684503 available Oct 23 03:57:34 root maldet(19665): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 23 03:57:34 root maldet(19665): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 23 03:57:34 root maldet(19665): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 23 03:57:34 root maldet(19665): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 23 03:57:34 root maldet(19665): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 23 03:57:34 root maldet(19665): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 23 03:57:34 root maldet(19665): {sigup} verified md5sum of maldet-sigpack.tgz Oct 23 03:57:35 root maldet(19665): {sigup} unpacked and installed maldet-sigpack.tgz Oct 23 03:57:35 root maldet(19665): {sigup} verified md5sum of maldet-clean.tgz Oct 23 03:57:35 root maldet(19665): {sigup} unpacked and installed maldet-clean.tgz Oct 23 03:57:35 root maldet(19665): {sigup} signature set update completed Oct 23 03:57:35 root maldet(19665): {sigup} 17288 signatures (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Oct 23 03:57:35 root maldet(19920): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 23 03:57:35 root maldet(19920): {scan} signatures loaded: 17288 (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Oct 23 03:57:35 root maldet(19920): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 23 03:57:35 root maldet(19920): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 23 03:57:35 root maldet(19920): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 23 03:57:43 root maldet(19920): {scan} file list completed in 8s, found 257 files... Oct 23 03:57:43 root maldet(19920): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 23 03:57:43 root maldet(19920): {scan} scan of (257 files) in progress... Oct 23 03:58:02 root maldet(19920): {hit} malware hit {HEX}php.inject.miner2a2.489 found for /home/onlinecfo/public_html/wp-content/404CPH/zabbix-myconf-cPanel-public_html.txt404/.bc17854b.ico Oct 23 03:58:02 root maldet(19920): {quar} malware quarantined from '/home/onlinecfo/public_html/wp-content/404CPH/zabbix-myconf-cPanel-public_html.txt404/.bc17854b.ico' to '/usr/local/maldetect/quarantine/.bc17854b.ico.1952015398' Oct 23 03:58:02 root maldet(19920): {scan} scan completed on : files 257, malware hits 1, cleaned hits 0, time 27s Oct 23 03:58:02 root maldet(19920): {scan} scan report saved, to view run: maldet --report 221023-0357.19920 Oct 24 03:50:38 root maldet(9140): {update} checking for available updates... Oct 24 03:50:38 root maldet(9140): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 24 03:50:38 root maldet(9140): {update} hashing install files and checking against server... Oct 24 03:50:39 root maldet(9140): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 24 03:50:39 root maldet(9140): {update} latest version already installed. Oct 24 03:50:40 root maldet(9282): {sigup} performing signature update check... Oct 24 03:50:40 root maldet(9282): {sigup} local signature set is version 202210221684503 Oct 24 03:50:40 root maldet(9282): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 24 03:50:40 root maldet(9282): {sigup} latest signature set already installed Oct 24 03:50:42 root maldet(9409): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 24 03:50:42 root maldet(9409): {scan} signatures loaded: 17288 (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Oct 24 03:50:42 root maldet(9409): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 24 03:50:42 root maldet(9409): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 24 03:50:42 root maldet(9409): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 24 03:50:51 root maldet(9409): {scan} file list completed in 9s, found 158 files... Oct 24 03:50:51 root maldet(9409): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 24 03:50:51 root maldet(9409): {scan} scan of (158 files) in progress... Oct 24 03:51:03 root maldet(9409): {scan} scan completed on : files 158, malware hits 0, cleaned hits 0, time 21s Oct 24 03:51:03 root maldet(9409): {scan} scan report saved, to view run: maldet --report 221024-0350.9409 Oct 25 03:27:06 root maldet(8510): {update} checking for available updates... Oct 25 03:27:06 root maldet(8510): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 25 03:27:06 root maldet(8510): {update} hashing install files and checking against server... Oct 25 03:27:07 root maldet(8510): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 25 03:27:07 root maldet(8510): {update} latest version already installed. Oct 25 03:27:07 root maldet(8644): {sigup} performing signature update check... Oct 25 03:27:07 root maldet(8644): {sigup} local signature set is version 202210221684503 Oct 25 03:27:07 root maldet(8644): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 25 03:27:07 root maldet(8644): {sigup} latest signature set already installed Oct 25 03:27:07 root maldet(8775): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 25 03:27:08 root maldet(8775): {scan} signatures loaded: 17288 (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Oct 25 03:27:08 root maldet(8775): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 25 03:27:08 root maldet(8775): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 25 03:27:08 root maldet(8775): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 25 03:27:15 root maldet(8775): {scan} file list completed in 7s, found 191 files... Oct 25 03:27:15 root maldet(8775): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 25 03:27:16 root maldet(8775): {scan} scan of (191 files) in progress... Oct 25 03:27:28 root maldet(8775): {scan} scan completed on : files 191, malware hits 0, cleaned hits 0, time 21s Oct 25 03:27:28 root maldet(8775): {scan} scan report saved, to view run: maldet --report 221025-0327.8775 Oct 26 03:46:03 root maldet(19120): {update} checking for available updates... Oct 26 03:46:03 root maldet(19120): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 26 03:46:03 root maldet(19120): {update} hashing install files and checking against server... Oct 26 03:46:03 root maldet(19120): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 26 03:46:03 root maldet(19120): {update} latest version already installed. Oct 26 03:46:04 root maldet(19257): {sigup} performing signature update check... Oct 26 03:46:04 root maldet(19257): {sigup} local signature set is version 202210221684503 Oct 26 03:46:04 root maldet(19257): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 26 03:46:04 root maldet(19257): {sigup} new signature set 20221025990966 available Oct 26 03:46:04 root maldet(19257): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 26 03:46:04 root maldet(19257): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 26 03:46:04 root maldet(19257): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 26 03:46:04 root maldet(19257): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 26 03:46:05 root maldet(19257): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 26 03:46:05 root maldet(19257): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 26 03:46:05 root maldet(19257): {sigup} verified md5sum of maldet-sigpack.tgz Oct 26 03:46:05 root maldet(19257): {sigup} unpacked and installed maldet-sigpack.tgz Oct 26 03:46:05 root maldet(19257): {sigup} verified md5sum of maldet-clean.tgz Oct 26 03:46:05 root maldet(19257): {sigup} unpacked and installed maldet-clean.tgz Oct 26 03:46:05 root maldet(19257): {sigup} signature set update completed Oct 26 03:46:05 root maldet(19257): {sigup} 17288 signatures (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Oct 26 03:46:05 root maldet(19504): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 26 03:46:05 root maldet(19504): {scan} signatures loaded: 17288 (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Oct 26 03:46:05 root maldet(19504): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 26 03:46:05 root maldet(19504): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 26 03:46:05 root maldet(19504): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/home/ygconsultingengi/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 26 03:46:45 root maldet(19504): {scan} file list completed in 40s, found 169 files... Oct 26 03:46:45 root maldet(19504): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 26 03:46:45 root maldet(19504): {scan} scan of (169 files) in progress... Oct 26 03:47:01 root maldet(19504): {scan} scan completed on : files 169, malware hits 0, cleaned hits 0, time 56s Oct 26 03:47:01 root maldet(19504): {scan} scan report saved, to view run: maldet --report 221026-0346.19504 Oct 27 03:33:19 root maldet(7168): {update} checking for available updates... Oct 27 03:33:19 root maldet(7168): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 27 03:33:19 root maldet(7168): {update} hashing install files and checking against server... Oct 27 03:33:19 root maldet(7168): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 27 03:33:19 root maldet(7168): {update} latest version already installed. Oct 27 03:33:19 root maldet(7311): {sigup} performing signature update check... Oct 27 03:33:19 root maldet(7311): {sigup} local signature set is version 20221025990966 Oct 27 03:33:20 root maldet(7311): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 27 03:33:20 root maldet(7311): {sigup} latest signature set already installed Oct 27 03:33:20 root maldet(7435): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 27 03:33:22 root maldet(7435): {scan} signatures loaded: 17288 (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Oct 27 03:33:22 root maldet(7435): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 27 03:33:22 root maldet(7435): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 27 03:33:22 root maldet(7435): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 27 03:33:26 root maldet(7435): {scan} file list completed in 4s, found 331 files... Oct 27 03:33:26 root maldet(7435): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 27 03:33:26 root maldet(7435): {scan} scan of (331 files) in progress... Oct 27 03:33:45 root maldet(7435): {scan} scan completed on : files 331, malware hits 0, cleaned hits 0, time 25s Oct 27 03:33:45 root maldet(7435): {scan} scan report saved, to view run: maldet --report 221027-0333.7435 Oct 28 03:55:21 root maldet(30477): {update} checking for available updates... Oct 28 03:55:21 root maldet(30477): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 28 03:55:21 root maldet(30477): {update} hashing install files and checking against server... Oct 28 03:55:21 root maldet(30477): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 28 03:55:21 root maldet(30477): {update} latest version already installed. Oct 28 03:55:21 root maldet(30612): {sigup} performing signature update check... Oct 28 03:55:21 root maldet(30612): {sigup} local signature set is version 20221025990966 Oct 28 03:55:22 root maldet(30612): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 28 03:55:22 root maldet(30612): {sigup} latest signature set already installed Oct 28 03:55:22 root maldet(30730): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 28 03:55:22 root maldet(30730): {scan} signatures loaded: 17288 (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Oct 28 03:55:22 root maldet(30730): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 28 03:55:22 root maldet(30730): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 28 03:55:22 root maldet(30730): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 28 03:55:26 root maldet(30730): {scan} file list completed in 4s, found 296 files... Oct 28 03:55:26 root maldet(30730): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 28 03:55:26 root maldet(30730): {scan} scan of (296 files) in progress... Oct 28 03:55:41 root maldet(30730): {hit} malware hit {HEX}php.inject.miner2a2.489 found for /home/onlinecfo/public_html/wp-content/404CPH/nkjaco-WHMCS-clientearea-public_html.txt404/.dfbbfdf7.ico Oct 28 03:55:41 root maldet(30730): {quar} malware quarantined from '/home/onlinecfo/public_html/wp-content/404CPH/nkjaco-WHMCS-clientearea-public_html.txt404/.dfbbfdf7.ico' to '/usr/local/maldetect/quarantine/.dfbbfdf7.ico.69748068' Oct 28 03:55:41 root maldet(30730): {scan} scan completed on : files 296, malware hits 1, cleaned hits 0, time 19s Oct 28 03:55:41 root maldet(30730): {scan} scan report saved, to view run: maldet --report 221028-0355.30730 Oct 29 03:31:17 root maldet(10423): {update} checking for available updates... Oct 29 03:31:17 root maldet(10423): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 29 03:31:17 root maldet(10423): {update} hashing install files and checking against server... Oct 29 03:31:17 root maldet(10423): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 29 03:31:17 root maldet(10423): {update} latest version already installed. Oct 29 03:31:17 root maldet(10569): {sigup} performing signature update check... Oct 29 03:31:17 root maldet(10569): {sigup} local signature set is version 20221025990966 Oct 29 03:31:18 root maldet(10569): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 29 03:31:18 root maldet(10569): {sigup} new signature set 202210282304164 available Oct 29 03:31:18 root maldet(10569): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 29 03:31:18 root maldet(10569): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Oct 29 03:31:18 root maldet(10569): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Oct 29 03:31:18 root maldet(10569): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 29 03:31:18 root maldet(10569): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Oct 29 03:31:19 root maldet(10569): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Oct 29 03:31:19 root maldet(10569): {sigup} verified md5sum of maldet-sigpack.tgz Oct 29 03:31:19 root maldet(10569): {sigup} unpacked and installed maldet-sigpack.tgz Oct 29 03:31:19 root maldet(10569): {sigup} verified md5sum of maldet-clean.tgz Oct 29 03:31:19 root maldet(10569): {sigup} unpacked and installed maldet-clean.tgz Oct 29 03:31:19 root maldet(10569): {sigup} signature set update completed Oct 29 03:31:19 root maldet(10569): {sigup} 17288 signatures (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Oct 29 03:31:19 root maldet(10821): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 29 03:31:19 root maldet(10821): {scan} signatures loaded: 17288 (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Oct 29 03:31:19 root maldet(10821): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 29 03:31:19 root maldet(10821): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 29 03:31:19 root maldet(10821): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 29 03:31:23 root maldet(10821): {scan} file list completed in 4s, found 161 files... Oct 29 03:31:23 root maldet(10821): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 29 03:31:23 root maldet(10821): {scan} scan of (161 files) in progress... Oct 29 03:31:40 root maldet(10821): {scan} scan completed on : files 161, malware hits 0, cleaned hits 0, time 21s Oct 29 03:31:40 root maldet(10821): {scan} scan report saved, to view run: maldet --report 221029-0331.10821 Oct 30 03:36:48 root maldet(25036): {update} checking for available updates... Oct 30 03:36:48 root maldet(25036): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 30 03:36:48 root maldet(25036): {update} hashing install files and checking against server... Oct 30 03:36:49 root maldet(25036): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 30 03:36:49 root maldet(25036): {update} latest version already installed. Oct 30 03:36:49 root maldet(25178): {sigup} performing signature update check... Oct 30 03:36:49 root maldet(25178): {sigup} local signature set is version 202210282304164 Oct 30 03:36:49 root maldet(25178): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 30 03:36:49 root maldet(25178): {sigup} latest signature set already installed Oct 30 03:36:49 root maldet(25321): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 30 03:36:49 root maldet(25321): {scan} signatures loaded: 17288 (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Oct 30 03:36:49 root maldet(25321): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 30 03:36:49 root maldet(25321): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 30 03:36:49 root maldet(25321): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 30 03:36:54 root maldet(25321): {scan} file list completed in 5s, found 186 files... Oct 30 03:36:54 root maldet(25321): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 30 03:36:54 root maldet(25321): {scan} scan of (186 files) in progress... Oct 30 03:37:19 root maldet(25321): {hit} malware hit {HEX}php.inject.miner2a2.489 found for /home/onlinecfo/public_html/wp-content/404CPH/aemsolutions-WordPress-site-public_html.txt404/.a0fad2ea.ico Oct 30 03:37:19 root maldet(25321): {quar} malware quarantined from '/home/onlinecfo/public_html/wp-content/404CPH/aemsolutions-WordPress-site-public_html.txt404/.a0fad2ea.ico' to '/usr/local/maldetect/quarantine/.a0fad2ea.ico.269097969' Oct 30 03:37:19 root maldet(25321): {scan} scan completed on : files 186, malware hits 1, cleaned hits 0, time 30s Oct 30 03:37:19 root maldet(25321): {scan} scan report saved, to view run: maldet --report 221030-0336.25321 Oct 31 03:28:51 root maldet(23313): {update} checking for available updates... Oct 31 03:28:51 root maldet(23313): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Oct 31 03:28:51 root maldet(23313): {update} hashing install files and checking against server... Oct 31 03:28:51 root maldet(23313): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Oct 31 03:28:51 root maldet(23313): {update} latest version already installed. Oct 31 03:28:51 root maldet(23450): {sigup} performing signature update check... Oct 31 03:28:51 root maldet(23450): {sigup} local signature set is version 202210282304164 Oct 31 03:28:51 root maldet(23450): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Oct 31 03:28:51 root maldet(23450): {sigup} latest signature set already installed Oct 31 03:28:51 root maldet(23569): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Oct 31 03:28:52 root maldet(23569): {scan} signatures loaded: 17288 (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Oct 31 03:28:52 root maldet(23569): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Oct 31 03:28:52 root maldet(23569): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Oct 31 03:28:52 root maldet(23569): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Oct 31 03:28:56 root maldet(23569): {scan} file list completed in 4s, found 176 files... Oct 31 03:28:56 root maldet(23569): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Oct 31 03:28:56 root maldet(23569): {scan} scan of (176 files) in progress... Oct 31 03:29:11 root maldet(23569): {scan} scan completed on : files 176, malware hits 0, cleaned hits 0, time 20s Oct 31 03:29:11 root maldet(23569): {scan} scan report saved, to view run: maldet --report 221031-0328.23569 Nov 01 03:46:19 root maldet(26388): {update} checking for available updates... Nov 01 03:46:19 root maldet(26388): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 01 03:46:19 root maldet(26388): {update} hashing install files and checking against server... Nov 01 03:46:20 root maldet(26388): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 01 03:46:20 root maldet(26388): {update} latest version already installed. Nov 01 03:46:20 root maldet(26534): {sigup} performing signature update check... Nov 01 03:46:20 root maldet(26534): {sigup} local signature set is version 202210282304164 Nov 01 03:46:20 root maldet(26534): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 01 03:46:20 root maldet(26534): {sigup} new signature set 202210313077017 available Nov 01 03:46:20 root maldet(26534): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 01 03:46:20 root maldet(26534): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 01 03:46:20 root maldet(26534): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 01 03:46:20 root maldet(26534): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 01 03:46:21 root maldet(26534): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 01 03:46:21 root maldet(26534): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 01 03:46:21 root maldet(26534): {sigup} verified md5sum of maldet-sigpack.tgz Nov 01 03:46:21 root maldet(26534): {sigup} unpacked and installed maldet-sigpack.tgz Nov 01 03:46:21 root maldet(26534): {sigup} verified md5sum of maldet-clean.tgz Nov 01 03:46:21 root maldet(26534): {sigup} unpacked and installed maldet-clean.tgz Nov 01 03:46:21 root maldet(26534): {sigup} signature set update completed Nov 01 03:46:21 root maldet(26534): {sigup} 17288 signatures (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Nov 01 03:46:21 root maldet(26795): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 01 03:46:22 root maldet(26795): {scan} signatures loaded: 17288 (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Nov 01 03:46:22 root maldet(26795): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 01 03:46:22 root maldet(26795): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 01 03:46:22 root maldet(26795): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 01 03:46:26 root maldet(26795): {scan} file list completed in 4s, found 356 files... Nov 01 03:46:26 root maldet(26795): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 01 03:46:26 root maldet(26795): {scan} scan of (356 files) in progress... Nov 01 03:46:43 root maldet(26795): {scan} scan completed on : files 356, malware hits 0, cleaned hits 0, time 22s Nov 01 03:46:43 root maldet(26795): {scan} scan report saved, to view run: maldet --report 221101-0346.26795 Nov 02 03:46:14 root maldet(8867): {update} checking for available updates... Nov 02 03:46:15 root maldet(8867): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 02 03:46:15 root maldet(8867): {update} hashing install files and checking against server... Nov 02 03:46:15 root maldet(8867): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 02 03:46:15 root maldet(8867): {update} latest version already installed. Nov 02 03:46:15 root maldet(9009): {sigup} performing signature update check... Nov 02 03:46:15 root maldet(9009): {sigup} local signature set is version 202210313077017 Nov 02 03:46:15 root maldet(9009): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 02 03:46:15 root maldet(9009): {sigup} new signature set 202211013798525 available Nov 02 03:46:15 root maldet(9009): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 02 03:46:16 root maldet(9009): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 02 03:46:16 root maldet(9009): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 02 03:46:16 root maldet(9009): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 02 03:46:16 root maldet(9009): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 02 03:46:16 root maldet(9009): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 02 03:46:16 root maldet(9009): {sigup} verified md5sum of maldet-sigpack.tgz Nov 02 03:46:16 root maldet(9009): {sigup} unpacked and installed maldet-sigpack.tgz Nov 02 03:46:16 root maldet(9009): {sigup} verified md5sum of maldet-clean.tgz Nov 02 03:46:16 root maldet(9009): {sigup} unpacked and installed maldet-clean.tgz Nov 02 03:46:16 root maldet(9009): {sigup} signature set update completed Nov 02 03:46:16 root maldet(9009): {sigup} 17288 signatures (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Nov 02 03:46:17 root maldet(9279): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 02 03:46:17 root maldet(9279): {scan} signatures loaded: 17288 (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Nov 02 03:46:17 root maldet(9279): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 02 03:46:17 root maldet(9279): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 02 03:46:17 root maldet(9279): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 02 03:46:21 root maldet(9279): {scan} file list completed in 4s, found 155 files... Nov 02 03:46:21 root maldet(9279): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 02 03:46:21 root maldet(9279): {scan} scan of (155 files) in progress... Nov 02 03:46:35 root maldet(9279): {scan} scan completed on : files 155, malware hits 0, cleaned hits 0, time 18s Nov 02 03:46:35 root maldet(9279): {scan} scan report saved, to view run: maldet --report 221102-0346.9279 Nov 03 03:52:47 root maldet(30780): {update} checking for available updates... Nov 03 03:52:47 root maldet(30780): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 03 03:52:47 root maldet(30780): {update} hashing install files and checking against server... Nov 03 03:52:48 root maldet(30780): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 03 03:52:48 root maldet(30780): {update} latest version already installed. Nov 03 03:52:48 root maldet(30916): {sigup} performing signature update check... Nov 03 03:52:48 root maldet(30916): {sigup} local signature set is version 202211013798525 Nov 03 03:52:48 root maldet(30916): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 03 03:52:48 root maldet(30916): {sigup} latest signature set already installed Nov 03 03:52:48 root maldet(31029): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 03 03:52:49 root maldet(31029): {scan} signatures loaded: 17288 (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Nov 03 03:52:49 root maldet(31029): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 03 03:52:49 root maldet(31029): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 03 03:52:49 root maldet(31029): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 03 03:52:53 root maldet(31029): {scan} file list completed in 4s, found 186 files... Nov 03 03:52:53 root maldet(31029): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 03 03:52:53 root maldet(31029): {scan} scan of (186 files) in progress... Nov 03 03:53:08 root maldet(31029): {scan} scan completed on : files 186, malware hits 0, cleaned hits 0, time 20s Nov 03 03:53:08 root maldet(31029): {scan} scan report saved, to view run: maldet --report 221103-0352.31029 Nov 04 03:10:45 root maldet(28360): {update} checking for available updates... Nov 04 03:10:45 root maldet(28360): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 04 03:10:45 root maldet(28360): {update} hashing install files and checking against server... Nov 04 03:10:45 root maldet(28360): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 04 03:10:45 root maldet(28360): {update} latest version already installed. Nov 04 03:10:45 root maldet(28496): {sigup} performing signature update check... Nov 04 03:10:45 root maldet(28496): {sigup} local signature set is version 202211013798525 Nov 04 03:10:45 root maldet(28496): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 04 03:10:45 root maldet(28496): {sigup} latest signature set already installed Nov 04 03:10:46 root maldet(28614): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 04 03:10:46 root maldet(28614): {scan} signatures loaded: 17288 (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Nov 04 03:10:46 root maldet(28614): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 04 03:10:46 root maldet(28614): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 04 03:10:46 root maldet(28614): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 04 03:10:51 root maldet(28614): {scan} file list completed in 5s, found 197589 files... Nov 04 03:10:51 root maldet(28614): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 04 03:10:51 root maldet(28614): {scan} scan of (197589 files) in progress... Nov 04 03:15:38 root maldet(28614): {scan} scan completed on : files 197589, malware hits 0, cleaned hits 0, time 291s Nov 04 03:15:38 root maldet(28614): {scan} scan report saved, to view run: maldet --report 221104-0310.28614 Nov 05 03:53:25 root maldet(20877): {update} checking for available updates... Nov 05 03:53:25 root maldet(20877): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 05 03:53:25 root maldet(20877): {update} hashing install files and checking against server... Nov 05 03:53:25 root maldet(20877): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 05 03:53:25 root maldet(20877): {update} latest version already installed. Nov 05 03:53:26 root maldet(21033): {sigup} performing signature update check... Nov 05 03:53:26 root maldet(21033): {sigup} local signature set is version 202211013798525 Nov 05 03:53:26 root maldet(21033): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 05 03:53:26 root maldet(21033): {sigup} new signature set 20221104333621 available Nov 05 03:53:26 root maldet(21033): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 05 03:53:27 root maldet(21033): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 05 03:53:27 root maldet(21033): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 05 03:53:27 root maldet(21033): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 05 03:53:27 root maldet(21033): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 05 03:53:27 root maldet(21033): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 05 03:53:27 root maldet(21033): {sigup} verified md5sum of maldet-sigpack.tgz Nov 05 03:53:28 root maldet(21033): {sigup} unpacked and installed maldet-sigpack.tgz Nov 05 03:53:28 root maldet(21033): {sigup} verified md5sum of maldet-clean.tgz Nov 05 03:53:28 root maldet(21033): {sigup} unpacked and installed maldet-clean.tgz Nov 05 03:53:28 root maldet(21033): {sigup} signature set update completed Nov 05 03:53:28 root maldet(21033): {sigup} 17288 signatures (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Nov 05 03:53:29 root maldet(21301): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 05 03:53:29 root maldet(21301): {scan} signatures loaded: 17288 (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Nov 05 03:53:29 root maldet(21301): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 05 03:53:29 root maldet(21301): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 05 03:53:29 root maldet(21301): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 05 03:53:34 root maldet(21301): {scan} file list completed in 5s, found 80 files... Nov 05 03:53:34 root maldet(21301): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 05 03:53:34 root maldet(21301): {scan} scan of (80 files) in progress... Nov 05 03:53:46 root maldet(21301): {scan} scan completed on : files 80, malware hits 0, cleaned hits 0, time 17s Nov 05 03:53:46 root maldet(21301): {scan} scan report saved, to view run: maldet --report 221105-0353.21301 Nov 06 03:55:29 root maldet(11373): {update} checking for available updates... Nov 06 03:55:30 root maldet(11373): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 06 03:55:30 root maldet(11373): {update} hashing install files and checking against server... Nov 06 03:55:30 root maldet(11373): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 06 03:55:30 root maldet(11373): {update} latest version already installed. Nov 06 03:55:30 root maldet(11508): {sigup} performing signature update check... Nov 06 03:55:30 root maldet(11508): {sigup} local signature set is version 20221104333621 Nov 06 03:55:30 root maldet(11508): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 06 03:55:30 root maldet(11508): {sigup} latest signature set already installed Nov 06 03:55:30 root maldet(11631): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 06 03:55:31 root maldet(11631): {scan} signatures loaded: 17288 (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Nov 06 03:55:31 root maldet(11631): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 06 03:55:31 root maldet(11631): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 06 03:55:31 root maldet(11631): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 06 03:55:35 root maldet(11631): {scan} file list completed in 4s, found 21739 files... Nov 06 03:55:35 root maldet(11631): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 06 03:55:35 root maldet(11631): {scan} scan of (21739 files) in progress... Nov 06 03:56:34 root maldet(11631): {scan} scan completed on : files 21739, malware hits 0, cleaned hits 0, time 64s Nov 06 03:56:34 root maldet(11631): {scan} scan report saved, to view run: maldet --report 221106-0355.11631 Nov 07 03:38:36 root maldet(11228): {update} checking for available updates... Nov 07 03:38:36 root maldet(11228): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 07 03:38:37 root maldet(11228): {update} hashing install files and checking against server... Nov 07 03:38:37 root maldet(11228): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 07 03:38:37 root maldet(11228): {update} latest version already installed. Nov 07 03:38:37 root maldet(11370): {sigup} performing signature update check... Nov 07 03:38:37 root maldet(11370): {sigup} local signature set is version 20221104333621 Nov 07 03:38:37 root maldet(11370): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 07 03:38:37 root maldet(11370): {sigup} latest signature set already installed Nov 07 03:38:37 root maldet(11488): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 07 03:38:37 root maldet(11488): {scan} signatures loaded: 17288 (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Nov 07 03:38:37 root maldet(11488): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 07 03:38:37 root maldet(11488): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 07 03:38:37 root maldet(11488): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 07 03:38:43 root maldet(11488): {scan} file list completed in 6s, found 77 files... Nov 07 03:38:43 root maldet(11488): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 07 03:38:43 root maldet(11488): {scan} scan of (77 files) in progress... Nov 07 03:38:58 root maldet(11488): {scan} scan completed on : files 77, malware hits 0, cleaned hits 0, time 21s Nov 07 03:38:58 root maldet(11488): {scan} scan report saved, to view run: maldet --report 221107-0338.11488 Nov 08 03:27:01 root maldet(21756): {update} checking for available updates... Nov 08 03:27:05 root maldet(21756): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 08 03:27:05 root maldet(21756): {update} hashing install files and checking against server... Nov 08 03:27:05 root maldet(21756): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 08 03:27:05 root maldet(21756): {update} latest version already installed. Nov 08 03:27:05 root maldet(21954): {sigup} performing signature update check... Nov 08 03:27:05 root maldet(21954): {sigup} local signature set is version 20221104333621 Nov 08 03:27:05 root maldet(21954): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 08 03:27:05 root maldet(21954): {sigup} new signature set 20221107478988 available Nov 08 03:27:05 root maldet(21954): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 08 03:27:06 root maldet(21954): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 08 03:27:06 root maldet(21954): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 08 03:27:06 root maldet(21954): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 08 03:27:06 root maldet(21954): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 08 03:27:06 root maldet(21954): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 08 03:27:06 root maldet(21954): {sigup} verified md5sum of maldet-sigpack.tgz Nov 08 03:27:09 root maldet(21954): {sigup} unpacked and installed maldet-sigpack.tgz Nov 08 03:27:09 root maldet(21954): {sigup} verified md5sum of maldet-clean.tgz Nov 08 03:27:09 root maldet(21954): {sigup} unpacked and installed maldet-clean.tgz Nov 08 03:27:09 root maldet(21954): {sigup} signature set update completed Nov 08 03:27:09 root maldet(21954): {sigup} 17288 signatures (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Nov 08 03:27:09 root maldet(22234): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 08 03:27:09 root maldet(22234): {scan} signatures loaded: 17288 (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Nov 08 03:27:09 root maldet(22234): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 08 03:27:09 root maldet(22234): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 08 03:27:09 root maldet(22234): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 08 03:27:14 root maldet(22234): {scan} file list completed in 5s, found 79 files... Nov 08 03:27:14 root maldet(22234): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 08 03:27:14 root maldet(22234): {scan} scan of (79 files) in progress... Nov 08 03:27:28 root maldet(22234): {scan} scan completed on : files 79, malware hits 0, cleaned hits 0, time 19s Nov 08 03:27:28 root maldet(22234): {scan} scan report saved, to view run: maldet --report 221108-0327.22234 Nov 09 03:55:27 root maldet(25723): {update} checking for available updates... Nov 09 03:55:29 root maldet(25723): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 09 03:55:29 root maldet(25723): {update} hashing install files and checking against server... Nov 09 03:55:29 root maldet(25723): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 09 03:55:29 root maldet(25723): {update} latest version already installed. Nov 09 03:55:29 root maldet(25896): {sigup} performing signature update check... Nov 09 03:55:29 root maldet(25896): {sigup} local signature set is version 20221107478988 Nov 09 03:55:29 root maldet(25896): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 09 03:55:29 root maldet(25896): {sigup} latest signature set already installed Nov 09 03:55:29 root maldet(26013): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 09 03:55:30 root maldet(26013): {scan} signatures loaded: 17288 (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Nov 09 03:55:30 root maldet(26013): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 09 03:55:30 root maldet(26013): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 09 03:55:30 root maldet(26013): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 09 03:55:35 root maldet(26013): {scan} file list completed in 5s, found 95 files... Nov 09 03:55:35 root maldet(26013): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 09 03:55:35 root maldet(26013): {scan} scan of (95 files) in progress... Nov 09 03:55:48 root maldet(26013): {scan} scan completed on : files 95, malware hits 0, cleaned hits 0, time 19s Nov 09 03:55:48 root maldet(26013): {scan} scan report saved, to view run: maldet --report 221109-0355.26013 Nov 10 03:30:43 root maldet(7493): {update} checking for available updates... Nov 10 03:30:43 root maldet(7493): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 10 03:30:43 root maldet(7493): {update} hashing install files and checking against server... Nov 10 03:30:43 root maldet(7493): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 10 03:30:43 root maldet(7493): {update} latest version already installed. Nov 10 03:30:43 root maldet(7634): {sigup} performing signature update check... Nov 10 03:30:43 root maldet(7634): {sigup} local signature set is version 20221107478988 Nov 10 03:30:44 root maldet(7634): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 10 03:30:44 root maldet(7634): {sigup} latest signature set already installed Nov 10 03:30:44 root maldet(7748): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 10 03:30:44 root maldet(7748): {scan} signatures loaded: 17288 (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Nov 10 03:30:44 root maldet(7748): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 10 03:30:44 root maldet(7748): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 10 03:30:44 root maldet(7748): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 10 03:30:49 root maldet(7748): {scan} file list completed in 5s, found 99 files... Nov 10 03:30:49 root maldet(7748): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 10 03:30:49 root maldet(7748): {scan} scan of (99 files) in progress... Nov 10 03:31:01 root maldet(7748): {scan} scan completed on : files 99, malware hits 0, cleaned hits 0, time 17s Nov 10 03:31:01 root maldet(7748): {scan} scan report saved, to view run: maldet --report 221110-0330.7748 Nov 11 03:36:36 root maldet(23467): {update} checking for available updates... Nov 11 03:36:36 root maldet(23467): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 11 03:36:36 root maldet(23467): {update} hashing install files and checking against server... Nov 11 03:36:37 root maldet(23467): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 11 03:36:37 root maldet(23467): {update} latest version already installed. Nov 11 03:36:37 root maldet(23601): {sigup} performing signature update check... Nov 11 03:36:37 root maldet(23601): {sigup} local signature set is version 20221107478988 Nov 11 03:36:37 root maldet(23601): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 11 03:36:37 root maldet(23601): {sigup} new signature set 202211101159608 available Nov 11 03:36:37 root maldet(23601): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 11 03:36:38 root maldet(23601): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 11 03:36:38 root maldet(23601): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 11 03:36:38 root maldet(23601): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 11 03:36:38 root maldet(23601): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 11 03:36:38 root maldet(23601): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 11 03:36:38 root maldet(23601): {sigup} verified md5sum of maldet-sigpack.tgz Nov 11 03:36:38 root maldet(23601): {sigup} unpacked and installed maldet-sigpack.tgz Nov 11 03:36:38 root maldet(23601): {sigup} verified md5sum of maldet-clean.tgz Nov 11 03:36:38 root maldet(23601): {sigup} unpacked and installed maldet-clean.tgz Nov 11 03:36:38 root maldet(23601): {sigup} signature set update completed Nov 11 03:36:38 root maldet(23601): {sigup} 17288 signatures (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Nov 11 03:36:39 root maldet(23851): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 11 03:36:39 root maldet(23851): {scan} signatures loaded: 17288 (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Nov 11 03:36:39 root maldet(23851): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 11 03:36:39 root maldet(23851): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 11 03:36:39 root maldet(23851): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 11 03:36:44 root maldet(23851): {scan} file list completed in 5s, found 83 files... Nov 11 03:36:44 root maldet(23851): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 11 03:36:44 root maldet(23851): {scan} scan of (83 files) in progress... Nov 11 03:37:03 root maldet(23851): {scan} scan completed on : files 83, malware hits 0, cleaned hits 0, time 24s Nov 11 03:37:03 root maldet(23851): {scan} scan report saved, to view run: maldet --report 221111-0336.23851 Nov 12 03:25:49 root maldet(19135): {update} checking for available updates... Nov 12 03:25:50 root maldet(19135): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 12 03:25:50 root maldet(19135): {update} hashing install files and checking against server... Nov 12 03:25:50 root maldet(19135): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 12 03:25:50 root maldet(19135): {update} latest version already installed. Nov 12 03:25:50 root maldet(19277): {sigup} performing signature update check... Nov 12 03:25:50 root maldet(19277): {sigup} local signature set is version 202211101159608 Nov 12 03:25:51 root maldet(19277): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 12 03:25:51 root maldet(19277): {sigup} latest signature set already installed Nov 12 03:25:51 root maldet(19395): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 12 03:25:51 root maldet(19395): {scan} signatures loaded: 17288 (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Nov 12 03:25:51 root maldet(19395): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 12 03:25:51 root maldet(19395): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 12 03:25:51 root maldet(19395): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 12 03:25:56 root maldet(19395): {scan} file list completed in 5s, found 66 files... Nov 12 03:25:56 root maldet(19395): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 12 03:25:56 root maldet(19395): {scan} scan of (66 files) in progress... Nov 12 03:26:09 root maldet(19395): {scan} scan completed on : files 66, malware hits 0, cleaned hits 0, time 18s Nov 12 03:26:09 root maldet(19395): {scan} scan report saved, to view run: maldet --report 221112-0325.19395 Nov 13 03:40:02 root maldet(6625): {update} checking for available updates... Nov 13 03:40:02 root maldet(6625): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 13 03:40:02 root maldet(6625): {update} hashing install files and checking against server... Nov 13 03:40:03 root maldet(6625): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 13 03:40:03 root maldet(6625): {update} latest version already installed. Nov 13 03:40:03 root maldet(6860): {sigup} performing signature update check... Nov 13 03:40:03 root maldet(6860): {sigup} local signature set is version 202211101159608 Nov 13 03:40:03 root maldet(6860): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 13 03:40:03 root maldet(6860): {sigup} latest signature set already installed Nov 13 03:40:03 root maldet(6997): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 13 03:40:03 root maldet(6997): {scan} signatures loaded: 17288 (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Nov 13 03:40:03 root maldet(6997): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 13 03:40:03 root maldet(6997): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 13 03:40:03 root maldet(6997): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 13 03:40:08 root maldet(6997): {scan} file list completed in 5s, found 77 files... Nov 13 03:40:08 root maldet(6997): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 13 03:40:08 root maldet(6997): {scan} scan of (77 files) in progress... Nov 13 03:40:22 root maldet(6997): {scan} scan completed on : files 77, malware hits 0, cleaned hits 0, time 19s Nov 13 03:40:22 root maldet(6997): {scan} scan report saved, to view run: maldet --report 221113-0340.6997 Nov 14 03:56:53 root maldet(8881): {update} checking for available updates... Nov 14 03:56:53 root maldet(8881): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 14 03:56:53 root maldet(8881): {update} hashing install files and checking against server... Nov 14 03:56:53 root maldet(8881): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 14 03:56:53 root maldet(8881): {update} latest version already installed. Nov 14 03:56:53 root maldet(9024): {sigup} performing signature update check... Nov 14 03:56:53 root maldet(9024): {sigup} local signature set is version 202211101159608 Nov 14 03:56:53 root maldet(9024): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 14 03:56:53 root maldet(9024): {sigup} new signature set 20221113503343 available Nov 14 03:56:53 root maldet(9024): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 14 03:56:54 root maldet(9024): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 14 03:56:54 root maldet(9024): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 14 03:56:54 root maldet(9024): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 14 03:56:54 root maldet(9024): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 14 03:56:54 root maldet(9024): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 14 03:56:54 root maldet(9024): {sigup} verified md5sum of maldet-sigpack.tgz Nov 14 03:56:55 root maldet(9024): {sigup} unpacked and installed maldet-sigpack.tgz Nov 14 03:56:55 root maldet(9024): {sigup} verified md5sum of maldet-clean.tgz Nov 14 03:56:55 root maldet(9024): {sigup} unpacked and installed maldet-clean.tgz Nov 14 03:56:55 root maldet(9024): {sigup} signature set update completed Nov 14 03:56:55 root maldet(9024): {sigup} 17288 signatures (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Nov 14 03:56:55 root maldet(9285): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 14 03:56:55 root maldet(9285): {scan} signatures loaded: 17288 (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Nov 14 03:56:55 root maldet(9285): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 14 03:56:55 root maldet(9285): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 14 03:56:55 root maldet(9285): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 14 03:57:01 root maldet(9285): {scan} file list completed in 6s, found 66 files... Nov 14 03:57:01 root maldet(9285): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 14 03:57:01 root maldet(9285): {scan} scan of (66 files) in progress... Nov 14 03:57:13 root maldet(9285): {scan} scan completed on : files 66, malware hits 0, cleaned hits 0, time 18s Nov 14 03:57:13 root maldet(9285): {scan} scan report saved, to view run: maldet --report 221114-0356.9285 Nov 15 03:49:46 root maldet(6827): {update} checking for available updates... Nov 15 03:49:46 root maldet(6827): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 15 03:49:46 root maldet(6827): {update} hashing install files and checking against server... Nov 15 03:49:46 root maldet(6827): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 15 03:49:46 root maldet(6827): {update} latest version already installed. Nov 15 03:49:46 root maldet(6977): {sigup} performing signature update check... Nov 15 03:49:46 root maldet(6977): {sigup} local signature set is version 20221113503343 Nov 15 03:49:46 root maldet(6977): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 15 03:49:46 root maldet(6977): {sigup} latest signature set already installed Nov 15 03:49:47 root maldet(7096): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 15 03:49:47 root maldet(7096): {scan} signatures loaded: 17288 (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Nov 15 03:49:47 root maldet(7096): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 15 03:49:47 root maldet(7096): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 15 03:49:47 root maldet(7096): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 15 03:49:51 root maldet(7096): {scan} file list completed in 4s, found 11870 files... Nov 15 03:49:51 root maldet(7096): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 15 03:49:51 root maldet(7096): {scan} scan of (11870 files) in progress... Nov 15 03:52:08 root maldet(7096): {scan} scan completed on : files 11870, malware hits 0, cleaned hits 0, time 141s Nov 15 03:52:08 root maldet(7096): {scan} scan report saved, to view run: maldet --report 221115-0349.7096 Nov 16 03:29:37 root maldet(11117): {update} checking for available updates... Nov 16 03:29:37 root maldet(11117): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 16 03:29:37 root maldet(11117): {update} hashing install files and checking against server... Nov 16 03:29:37 root maldet(11117): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 16 03:29:37 root maldet(11117): {update} latest version already installed. Nov 16 03:29:37 root maldet(11259): {sigup} performing signature update check... Nov 16 03:29:37 root maldet(11259): {sigup} local signature set is version 20221113503343 Nov 16 03:29:38 root maldet(11259): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 16 03:29:38 root maldet(11259): {sigup} latest signature set already installed Nov 16 03:29:38 root maldet(11372): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 16 03:29:38 root maldet(11372): {scan} signatures loaded: 17288 (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Nov 16 03:29:38 root maldet(11372): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 16 03:29:38 root maldet(11372): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 16 03:29:38 root maldet(11372): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 16 03:29:43 root maldet(11372): {scan} file list completed in 5s, found 156 files... Nov 16 03:29:43 root maldet(11372): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 16 03:29:43 root maldet(11372): {scan} scan of (156 files) in progress... Nov 16 03:29:56 root maldet(11372): {scan} scan completed on : files 156, malware hits 0, cleaned hits 0, time 18s Nov 16 03:29:56 root maldet(11372): {scan} scan report saved, to view run: maldet --report 221116-0329.11372 Nov 17 03:28:20 root maldet(896): {update} checking for available updates... Nov 17 03:28:20 root maldet(896): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 17 03:28:20 root maldet(896): {update} hashing install files and checking against server... Nov 17 03:28:20 root maldet(896): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 17 03:28:20 root maldet(896): {update} latest version already installed. Nov 17 03:28:21 root maldet(1040): {sigup} performing signature update check... Nov 17 03:28:21 root maldet(1040): {sigup} local signature set is version 20221113503343 Nov 17 03:28:21 root maldet(1040): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 17 03:28:21 root maldet(1040): {sigup} new signature set 202211161182053 available Nov 17 03:28:21 root maldet(1040): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 17 03:28:21 root maldet(1040): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 17 03:28:22 root maldet(1040): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 17 03:28:22 root maldet(1040): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 17 03:28:22 root maldet(1040): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 17 03:28:22 root maldet(1040): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 17 03:28:22 root maldet(1040): {sigup} verified md5sum of maldet-sigpack.tgz Nov 17 03:28:22 root maldet(1040): {sigup} unpacked and installed maldet-sigpack.tgz Nov 17 03:28:22 root maldet(1040): {sigup} verified md5sum of maldet-clean.tgz Nov 17 03:28:22 root maldet(1040): {sigup} unpacked and installed maldet-clean.tgz Nov 17 03:28:22 root maldet(1040): {sigup} signature set update completed Nov 17 03:28:22 root maldet(1040): {sigup} 17288 signatures (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Nov 17 03:28:22 root maldet(1295): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 17 03:28:22 root maldet(1295): {scan} signatures loaded: 17288 (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Nov 17 03:28:22 root maldet(1295): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 17 03:28:22 root maldet(1295): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 17 03:28:23 root maldet(1295): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 17 03:28:27 root maldet(1295): {scan} file list completed in 5s, found 179 files... Nov 17 03:28:27 root maldet(1295): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 17 03:28:27 root maldet(1295): {scan} scan of (179 files) in progress... Nov 17 03:28:52 root maldet(1295): {scan} scan completed on : files 179, malware hits 0, cleaned hits 0, time 30s Nov 17 03:28:52 root maldet(1295): {scan} scan report saved, to view run: maldet --report 221117-0328.1295 Nov 18 03:38:17 root maldet(22174): {update} checking for available updates... Nov 18 03:38:18 root maldet(22174): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 18 03:38:18 root maldet(22174): {update} hashing install files and checking against server... Nov 18 03:38:18 root maldet(22174): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 18 03:38:18 root maldet(22174): {update} latest version already installed. Nov 18 03:38:19 root maldet(22317): {sigup} performing signature update check... Nov 18 03:38:19 root maldet(22317): {sigup} local signature set is version 202211161182053 Nov 18 03:38:19 root maldet(22317): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 18 03:38:19 root maldet(22317): {sigup} latest signature set already installed Nov 18 03:38:20 root maldet(22434): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 18 03:38:20 root maldet(22434): {scan} signatures loaded: 17288 (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Nov 18 03:38:20 root maldet(22434): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 18 03:38:20 root maldet(22434): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 18 03:38:20 root maldet(22434): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 18 03:38:25 root maldet(22434): {scan} file list completed in 5s, found 177 files... Nov 18 03:38:25 root maldet(22434): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 18 03:38:25 root maldet(22434): {scan} scan of (177 files) in progress... Nov 18 03:38:47 root maldet(22434): {scan} scan completed on : files 177, malware hits 0, cleaned hits 0, time 27s Nov 18 03:38:47 root maldet(22434): {scan} scan report saved, to view run: maldet --report 221118-0338.22434 Nov 19 03:18:24 root maldet(5475): {update} checking for available updates... Nov 19 03:18:24 root maldet(5475): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 19 03:18:24 root maldet(5475): {update} hashing install files and checking against server... Nov 19 03:18:24 root maldet(5475): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 19 03:18:24 root maldet(5475): {update} latest version already installed. Nov 19 03:18:25 root maldet(5619): {sigup} performing signature update check... Nov 19 03:18:25 root maldet(5619): {sigup} local signature set is version 202211161182053 Nov 19 03:18:25 root maldet(5619): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 19 03:18:25 root maldet(5619): {sigup} latest signature set already installed Nov 19 03:18:25 root maldet(5733): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 19 03:18:25 root maldet(5733): {scan} signatures loaded: 17288 (14459 MD5 | 2046 HEX | 783 YARA | 0 USER) Nov 19 03:18:25 root maldet(5733): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 19 03:18:25 root maldet(5733): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 19 03:18:25 root maldet(5733): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 19 03:18:30 root maldet(5733): {scan} file list completed in 5s, found 190 files... Nov 19 03:18:30 root maldet(5733): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 19 03:18:30 root maldet(5733): {scan} scan of (190 files) in progress... Nov 19 03:18:44 root maldet(5733): {scan} scan completed on : files 190, malware hits 0, cleaned hits 0, time 19s Nov 19 03:18:44 root maldet(5733): {scan} scan report saved, to view run: maldet --report 221119-0318.5733 Nov 20 03:35:35 root maldet(11382): {update} checking for available updates... Nov 20 03:35:35 root maldet(11382): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 20 03:35:35 root maldet(11382): {update} hashing install files and checking against server... Nov 20 03:35:35 root maldet(11382): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 20 03:35:35 root maldet(11382): {update} latest version already installed. Nov 20 03:35:36 root maldet(11520): {sigup} performing signature update check... Nov 20 03:35:36 root maldet(11520): {sigup} local signature set is version 202211161182053 Nov 20 03:35:36 root maldet(11520): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 20 03:35:36 root maldet(11520): {sigup} new signature set 202211193704367 available Nov 20 03:35:36 root maldet(11520): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 20 03:35:36 root maldet(11520): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 20 03:35:36 root maldet(11520): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 20 03:35:36 root maldet(11520): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 20 03:35:37 root maldet(11520): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 20 03:35:37 root maldet(11520): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 20 03:35:37 root maldet(11520): {sigup} verified md5sum of maldet-sigpack.tgz Nov 20 03:35:37 root maldet(11520): {sigup} unpacked and installed maldet-sigpack.tgz Nov 20 03:35:37 root maldet(11520): {sigup} verified md5sum of maldet-clean.tgz Nov 20 03:35:37 root maldet(11520): {sigup} unpacked and installed maldet-clean.tgz Nov 20 03:35:37 root maldet(11520): {sigup} signature set update completed Nov 20 03:35:37 root maldet(11520): {sigup} 17297 signatures (14460 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 20 03:35:37 root maldet(11775): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 20 03:35:37 root maldet(11775): {scan} signatures loaded: 17297 (14460 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 20 03:35:37 root maldet(11775): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 20 03:35:37 root maldet(11775): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 20 03:35:37 root maldet(11775): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 20 03:35:44 root maldet(11775): {scan} file list completed in 7s, found 295 files... Nov 20 03:35:44 root maldet(11775): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 20 03:35:44 root maldet(11775): {scan} scan of (295 files) in progress... Nov 20 03:35:59 root maldet(11775): {hit} malware hit {HEX}php.cmdshell.rgod.362 found for /home/grggroup/public_html/about.php Nov 20 03:35:59 root maldet(11775): {quar} malware quarantined from '/home/grggroup/public_html/about.php' to '/usr/local/maldetect/quarantine/about.php.2182315836' Nov 20 03:35:59 root maldet(11775): {hit} malware hit {HEX}php.cmdshell.rgod.362 found for /home/grggroup/public_html/wp-corn-sample.php Nov 20 03:35:59 root maldet(11775): {quar} malware quarantined from '/home/grggroup/public_html/wp-corn-sample.php' to '/usr/local/maldetect/quarantine/wp-corn-sample.php.2063330753' Nov 20 03:35:59 root maldet(11775): {hit} malware hit {HEX}php.cmdshell.rgod.362 found for /tmp/grggroup/efbd87e04fee650bf13ab17f2cef1003 Nov 20 03:35:59 root maldet(11775): {quar} malware quarantined from '/tmp/grggroup/efbd87e04fee650bf13ab17f2cef1003' to '/usr/local/maldetect/quarantine/efbd87e04fee650bf13ab17f2cef1003.2625718320' Nov 20 03:35:59 root maldet(11775): {scan} scan completed on : files 295, malware hits 3, cleaned hits 0, time 22s Nov 20 03:35:59 root maldet(11775): {scan} scan report saved, to view run: maldet --report 221120-0335.11775 Nov 21 03:19:19 root maldet(5642): {update} checking for available updates... Nov 21 03:19:19 root maldet(5642): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 21 03:19:19 root maldet(5642): {update} hashing install files and checking against server... Nov 21 03:19:19 root maldet(5642): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 21 03:19:19 root maldet(5642): {update} latest version already installed. Nov 21 03:19:19 root maldet(5779): {sigup} performing signature update check... Nov 21 03:19:20 root maldet(5779): {sigup} local signature set is version 202211193704367 Nov 21 03:19:20 root maldet(5779): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 21 03:19:20 root maldet(5779): {sigup} latest signature set already installed Nov 21 03:19:20 root maldet(5895): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 21 03:19:20 root maldet(5895): {scan} signatures loaded: 17297 (14460 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 21 03:19:20 root maldet(5895): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 21 03:19:20 root maldet(5895): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 21 03:19:20 root maldet(5895): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 21 03:19:25 root maldet(5895): {scan} file list completed in 5s, found 121 files... Nov 21 03:19:25 root maldet(5895): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 21 03:19:25 root maldet(5895): {scan} scan of (121 files) in progress... Nov 21 03:19:39 root maldet(5895): {hit} malware hit {HEX}php.cmdshell.rgod.362 found for /home/grggroup/public_html/wp-corn-sample.php Nov 21 03:19:39 root maldet(5895): {quar} malware quarantined from '/home/grggroup/public_html/wp-corn-sample.php' to '/usr/local/maldetect/quarantine/wp-corn-sample.php.977525896' Nov 21 03:19:39 root maldet(5895): {hit} malware hit {HEX}php.cmdshell.rgod.362 found for /tmp/grggroup/efbd87e04fee650bf13ab17f2cef1003 Nov 21 03:19:39 root maldet(5895): {quar} malware quarantined from '/tmp/grggroup/efbd87e04fee650bf13ab17f2cef1003' to '/usr/local/maldetect/quarantine/efbd87e04fee650bf13ab17f2cef1003.1432812624' Nov 21 03:19:39 root maldet(5895): {scan} scan completed on : files 121, malware hits 2, cleaned hits 0, time 19s Nov 21 03:19:39 root maldet(5895): {scan} scan report saved, to view run: maldet --report 221121-0319.5895 Nov 22 03:21:05 root maldet(14767): {update} checking for available updates... Nov 22 03:21:05 root maldet(14767): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 22 03:21:05 root maldet(14767): {update} hashing install files and checking against server... Nov 22 03:21:06 root maldet(14767): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 22 03:21:06 root maldet(14767): {update} latest version already installed. Nov 22 03:21:06 root maldet(14911): {sigup} performing signature update check... Nov 22 03:21:06 root maldet(14911): {sigup} local signature set is version 202211193704367 Nov 22 03:21:06 root maldet(14911): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 22 03:21:06 root maldet(14911): {sigup} latest signature set already installed Nov 22 03:21:06 root maldet(15029): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 22 03:21:06 root maldet(15029): {scan} signatures loaded: 17297 (14460 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 22 03:21:06 root maldet(15029): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 22 03:21:06 root maldet(15029): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 22 03:21:06 root maldet(15029): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 22 03:21:12 root maldet(15029): {scan} file list completed in 6s, found 74 files... Nov 22 03:21:12 root maldet(15029): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 22 03:21:12 root maldet(15029): {scan} scan of (74 files) in progress... Nov 22 03:21:25 root maldet(15029): {scan} scan completed on : files 74, malware hits 0, cleaned hits 0, time 19s Nov 22 03:21:25 root maldet(15029): {scan} scan report saved, to view run: maldet --report 221122-0321.15029 Nov 23 03:51:40 root maldet(20533): {update} checking for available updates... Nov 23 03:51:40 root maldet(20533): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 23 03:51:40 root maldet(20533): {update} hashing install files and checking against server... Nov 23 03:51:40 root maldet(20533): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 23 03:51:40 root maldet(20533): {update} latest version already installed. Nov 23 03:51:40 root maldet(20680): {sigup} performing signature update check... Nov 23 03:51:40 root maldet(20680): {sigup} local signature set is version 202211193704367 Nov 23 03:51:41 root maldet(20680): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 23 03:51:41 root maldet(20680): {sigup} new signature set 20221122180803 available Nov 23 03:51:41 root maldet(20680): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 23 03:51:41 root maldet(20680): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 23 03:51:41 root maldet(20680): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 23 03:51:41 root maldet(20680): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 23 03:51:42 root maldet(20680): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 23 03:51:42 root maldet(20680): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 23 03:51:42 root maldet(20680): {sigup} verified md5sum of maldet-sigpack.tgz Nov 23 03:51:44 root maldet(20680): {sigup} unpacked and installed maldet-sigpack.tgz Nov 23 03:51:44 root maldet(20680): {sigup} verified md5sum of maldet-clean.tgz Nov 23 03:51:44 root maldet(20680): {sigup} unpacked and installed maldet-clean.tgz Nov 23 03:51:44 root maldet(20680): {sigup} signature set update completed Nov 23 03:51:44 root maldet(20680): {sigup} 17297 signatures (14460 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 23 03:51:45 root maldet(20951): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 23 03:51:45 root maldet(20951): {scan} signatures loaded: 17297 (14460 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 23 03:51:45 root maldet(20951): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 23 03:51:45 root maldet(20951): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 23 03:51:45 root maldet(20951): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 23 03:51:50 root maldet(20951): {scan} file list completed in 5s, found 92 files... Nov 23 03:51:50 root maldet(20951): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 23 03:51:50 root maldet(20951): {scan} scan of (92 files) in progress... Nov 23 03:52:03 root maldet(20951): {scan} scan completed on : files 92, malware hits 0, cleaned hits 0, time 18s Nov 23 03:52:03 root maldet(20951): {scan} scan report saved, to view run: maldet --report 221123-0351.20951 Nov 24 03:19:20 root maldet(5374): {update} checking for available updates... Nov 24 03:19:20 root maldet(5374): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 24 03:19:20 root maldet(5374): {update} hashing install files and checking against server... Nov 24 03:19:20 root maldet(5374): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 24 03:19:20 root maldet(5374): {update} latest version already installed. Nov 24 03:19:20 root maldet(5568): {sigup} performing signature update check... Nov 24 03:19:20 root maldet(5568): {sigup} local signature set is version 20221122180803 Nov 24 03:19:20 root maldet(5568): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 24 03:19:20 root maldet(5568): {sigup} latest signature set already installed Nov 24 03:19:20 root maldet(5709): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 24 03:19:21 root maldet(5709): {scan} signatures loaded: 17297 (14460 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 24 03:19:21 root maldet(5709): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 24 03:19:21 root maldet(5709): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 24 03:19:21 root maldet(5709): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 24 03:19:26 root maldet(5709): {scan} file list completed in 5s, found 90 files... Nov 24 03:19:26 root maldet(5709): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 24 03:19:26 root maldet(5709): {scan} scan of (90 files) in progress... Nov 24 03:19:43 root maldet(5709): {scan} scan completed on : files 90, malware hits 0, cleaned hits 0, time 21s Nov 24 03:19:43 root maldet(5709): {scan} scan report saved, to view run: maldet --report 221124-0319.5709 Nov 25 03:50:27 root maldet(8837): {update} checking for available updates... Nov 25 03:50:28 root maldet(8837): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 25 03:50:28 root maldet(8837): {update} hashing install files and checking against server... Nov 25 03:50:28 root maldet(8837): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 25 03:50:28 root maldet(8837): {update} latest version already installed. Nov 25 03:50:28 root maldet(8976): {sigup} performing signature update check... Nov 25 03:50:28 root maldet(8976): {sigup} local signature set is version 20221122180803 Nov 25 03:50:28 root maldet(8976): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 25 03:50:28 root maldet(8976): {sigup} latest signature set already installed Nov 25 03:50:28 root maldet(9092): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 25 03:50:29 root maldet(9092): {scan} signatures loaded: 17297 (14460 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 25 03:50:29 root maldet(9092): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 25 03:50:29 root maldet(9092): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 25 03:50:29 root maldet(9092): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 25 03:50:33 root maldet(9092): {scan} file list completed in 4s, found 237 files... Nov 25 03:50:33 root maldet(9092): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 25 03:50:33 root maldet(9092): {scan} scan of (237 files) in progress... Nov 25 03:50:46 root maldet(9092): {scan} scan completed on : files 237, malware hits 0, cleaned hits 0, time 18s Nov 25 03:50:46 root maldet(9092): {scan} scan report saved, to view run: maldet --report 221125-0350.9092 Nov 26 03:45:59 root maldet(6084): {update} checking for available updates... Nov 26 03:46:00 root maldet(6084): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 26 03:46:00 root maldet(6084): {update} hashing install files and checking against server... Nov 26 03:46:00 root maldet(6084): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 26 03:46:00 root maldet(6084): {update} latest version already installed. Nov 26 03:46:00 root maldet(6224): {sigup} performing signature update check... Nov 26 03:46:00 root maldet(6224): {sigup} local signature set is version 20221122180803 Nov 26 03:46:00 root maldet(6224): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 26 03:46:00 root maldet(6224): {sigup} new signature set 20221125860251 available Nov 26 03:46:00 root maldet(6224): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 26 03:46:01 root maldet(6224): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 26 03:46:01 root maldet(6224): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 26 03:46:01 root maldet(6224): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 26 03:46:01 root maldet(6224): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 26 03:46:01 root maldet(6224): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 26 03:46:02 root maldet(6224): {sigup} verified md5sum of maldet-sigpack.tgz Nov 26 03:46:02 root maldet(6224): {sigup} unpacked and installed maldet-sigpack.tgz Nov 26 03:46:02 root maldet(6224): {sigup} verified md5sum of maldet-clean.tgz Nov 26 03:46:02 root maldet(6224): {sigup} unpacked and installed maldet-clean.tgz Nov 26 03:46:02 root maldet(6224): {sigup} signature set update completed Nov 26 03:46:02 root maldet(6224): {sigup} 17297 signatures (14460 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 26 03:46:02 root maldet(6492): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 26 03:46:02 root maldet(6492): {scan} signatures loaded: 17297 (14460 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 26 03:46:02 root maldet(6492): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 26 03:46:02 root maldet(6492): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 26 03:46:02 root maldet(6492): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 26 03:46:10 root maldet(6492): {scan} file list completed in 8s, found 198418 files... Nov 26 03:46:10 root maldet(6492): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 26 03:46:10 root maldet(6492): {scan} scan of (198418 files) in progress... Nov 26 03:52:25 root maldet(6492): {hit} malware hit {HEX}php.base64.inject.181 found for /home/aftptarun/public_html/wp-content/plugins/autoptimize/lufix.php Nov 26 03:52:25 root maldet(6492): {quar} malware quarantined from '/home/aftptarun/public_html/wp-content/plugins/autoptimize/lufix.php' to '/usr/local/maldetect/quarantine/lufix.php.77872096' Nov 26 03:52:25 root maldet(6492): {scan} scan completed on : files 198418, malware hits 1, cleaned hits 0, time 383s Nov 26 03:52:25 root maldet(6492): {scan} scan report saved, to view run: maldet --report 221126-0346.6492 Nov 27 03:18:18 root maldet(17022): {update} checking for available updates... Nov 27 03:18:18 root maldet(17022): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 27 03:18:18 root maldet(17022): {update} hashing install files and checking against server... Nov 27 03:18:18 root maldet(17022): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 27 03:18:18 root maldet(17022): {update} latest version already installed. Nov 27 03:18:18 root maldet(17168): {sigup} performing signature update check... Nov 27 03:18:18 root maldet(17168): {sigup} local signature set is version 20221125860251 Nov 27 03:18:19 root maldet(17168): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 27 03:18:19 root maldet(17168): {sigup} latest signature set already installed Nov 27 03:18:19 root maldet(17294): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 27 03:18:19 root maldet(17294): {scan} signatures loaded: 17297 (14460 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 27 03:18:19 root maldet(17294): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 27 03:18:19 root maldet(17294): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 27 03:18:19 root maldet(17294): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 27 03:18:26 root maldet(17294): {scan} file list completed in 7s, found 125 files... Nov 27 03:18:26 root maldet(17294): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 27 03:18:26 root maldet(17294): {scan} scan of (125 files) in progress... Nov 27 03:18:41 root maldet(17294): {scan} scan completed on : files 125, malware hits 0, cleaned hits 0, time 22s Nov 27 03:18:41 root maldet(17294): {scan} scan report saved, to view run: maldet --report 221127-0318.17294 Nov 28 03:08:53 root maldet(31019): {update} checking for available updates... Nov 28 03:08:53 root maldet(31019): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 28 03:08:53 root maldet(31019): {update} hashing install files and checking against server... Nov 28 03:08:53 root maldet(31019): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 28 03:08:53 root maldet(31019): {update} latest version already installed. Nov 28 03:08:53 root maldet(31169): {sigup} performing signature update check... Nov 28 03:08:53 root maldet(31169): {sigup} local signature set is version 20221125860251 Nov 28 03:08:54 root maldet(31169): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 28 03:08:54 root maldet(31169): {sigup} latest signature set already installed Nov 28 03:08:54 root maldet(31287): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 28 03:08:54 root maldet(31287): {scan} signatures loaded: 17297 (14460 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 28 03:08:54 root maldet(31287): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 28 03:08:54 root maldet(31287): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 28 03:08:54 root maldet(31287): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 28 03:09:02 root maldet(31287): {scan} file list completed in 8s, found 99 files... Nov 28 03:09:02 root maldet(31287): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 28 03:09:02 root maldet(31287): {scan} scan of (99 files) in progress... Nov 28 03:09:15 root maldet(31287): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Nov 28 03:09:15 root maldet(31287): {scan} scan completed on : files 99, malware hits 0, cleaned hits 0, time 21s Nov 28 03:09:15 root maldet(31287): {scan} scan report saved, to view run: maldet --report 221128-0308.31287 Nov 29 03:42:00 root maldet(7461): {update} checking for available updates... Nov 29 03:42:00 root maldet(7461): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 29 03:42:00 root maldet(7461): {update} hashing install files and checking against server... Nov 29 03:42:01 root maldet(7461): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 29 03:42:01 root maldet(7461): {update} latest version already installed. Nov 29 03:42:01 root maldet(7621): {sigup} performing signature update check... Nov 29 03:42:01 root maldet(7621): {sigup} local signature set is version 20221125860251 Nov 29 03:42:01 root maldet(7621): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 29 03:42:01 root maldet(7621): {sigup} new signature set 202211281542833 available Nov 29 03:42:01 root maldet(7621): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 29 03:42:02 root maldet(7621): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Nov 29 03:42:02 root maldet(7621): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Nov 29 03:42:02 root maldet(7621): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 29 03:42:02 root maldet(7621): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Nov 29 03:42:02 root maldet(7621): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Nov 29 03:42:02 root maldet(7621): {sigup} verified md5sum of maldet-sigpack.tgz Nov 29 03:42:02 root maldet(7621): {sigup} unpacked and installed maldet-sigpack.tgz Nov 29 03:42:02 root maldet(7621): {sigup} verified md5sum of maldet-clean.tgz Nov 29 03:42:02 root maldet(7621): {sigup} unpacked and installed maldet-clean.tgz Nov 29 03:42:02 root maldet(7621): {sigup} signature set update completed Nov 29 03:42:02 root maldet(7621): {sigup} 17330 signatures (14493 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 29 03:42:02 root maldet(7877): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 29 03:42:03 root maldet(7877): {scan} signatures loaded: 17330 (14493 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 29 03:42:03 root maldet(7877): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 29 03:42:03 root maldet(7877): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 29 03:42:03 root maldet(7877): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 29 03:42:10 root maldet(7877): {scan} file list completed in 7s, found 103 files... Nov 29 03:42:10 root maldet(7877): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 29 03:42:10 root maldet(7877): {scan} scan of (103 files) in progress... Nov 29 03:42:26 root maldet(7877): {scan} scan completed on : files 103, malware hits 0, cleaned hits 0, time 24s Nov 29 03:42:26 root maldet(7877): {scan} scan report saved, to view run: maldet --report 221129-0342.7877 Nov 30 03:25:23 root maldet(27064): {update} checking for available updates... Nov 30 03:25:24 root maldet(27064): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Nov 30 03:25:24 root maldet(27064): {update} hashing install files and checking against server... Nov 30 03:25:24 root maldet(27064): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Nov 30 03:25:24 root maldet(27064): {update} latest version already installed. Nov 30 03:25:24 root maldet(27201): {sigup} performing signature update check... Nov 30 03:25:24 root maldet(27201): {sigup} local signature set is version 202211281542833 Nov 30 03:25:24 root maldet(27201): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Nov 30 03:25:24 root maldet(27201): {sigup} latest signature set already installed Nov 30 03:25:24 root maldet(27317): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Nov 30 03:25:25 root maldet(27317): {scan} signatures loaded: 17330 (14493 MD5 | 2054 HEX | 783 YARA | 0 USER) Nov 30 03:25:25 root maldet(27317): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Nov 30 03:25:25 root maldet(27317): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Nov 30 03:25:25 root maldet(27317): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Nov 30 03:25:32 root maldet(27317): {scan} file list completed in 7s, found 259 files... Nov 30 03:25:32 root maldet(27317): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Nov 30 03:25:32 root maldet(27317): {scan} scan of (259 files) in progress... Nov 30 03:25:47 root maldet(27317): {hit} malware hit {HEX}php.cmdshell.rgod.362 found for /home/grggroup/public_html/wp-corn-sample.php Nov 30 03:25:47 root maldet(27317): {quar} malware quarantined from '/home/grggroup/public_html/wp-corn-sample.php' to '/usr/local/maldetect/quarantine/wp-corn-sample.php.139327958' Nov 30 03:25:47 root maldet(27317): {scan} scan completed on : files 259, malware hits 1, cleaned hits 0, time 23s Nov 30 03:25:47 root maldet(27317): {scan} scan report saved, to view run: maldet --report 221130-0325.27317 Dec 01 03:40:30 root maldet(719): {update} checking for available updates... Dec 01 03:40:30 root maldet(719): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 01 03:40:30 root maldet(719): {update} hashing install files and checking against server... Dec 01 03:40:30 root maldet(719): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 01 03:40:31 root maldet(719): {update} latest version already installed. Dec 01 03:40:31 root maldet(858): {sigup} performing signature update check... Dec 01 03:40:31 root maldet(858): {sigup} local signature set is version 202211281542833 Dec 01 03:40:32 root maldet(858): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 01 03:40:32 root maldet(858): {sigup} latest signature set already installed Dec 01 03:40:32 root maldet(993): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 01 03:40:32 root maldet(993): {scan} signatures loaded: 17330 (14493 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 01 03:40:32 root maldet(993): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 01 03:40:32 root maldet(993): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 01 03:40:32 root maldet(993): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 01 03:40:39 root maldet(993): {scan} file list completed in 7s, found 108 files... Dec 01 03:40:39 root maldet(993): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 01 03:40:39 root maldet(993): {scan} scan of (108 files) in progress... Dec 01 03:40:53 root maldet(993): {scan} scan completed on : files 108, malware hits 0, cleaned hits 0, time 21s Dec 01 03:40:53 root maldet(993): {scan} scan report saved, to view run: maldet --report 221201-0340.993 Dec 02 03:21:37 root maldet(21499): {update} checking for available updates... Dec 02 03:21:38 root maldet(21499): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 02 03:21:38 root maldet(21499): {update} hashing install files and checking against server... Dec 02 03:21:38 root maldet(21499): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 02 03:21:38 root maldet(21499): {update} latest version already installed. Dec 02 03:21:38 root maldet(21642): {sigup} performing signature update check... Dec 02 03:21:38 root maldet(21642): {sigup} local signature set is version 202211281542833 Dec 02 03:21:38 root maldet(21642): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 02 03:21:38 root maldet(21642): {sigup} new signature set 202212012220961 available Dec 02 03:21:38 root maldet(21642): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 02 03:21:39 root maldet(21642): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 02 03:21:41 root maldet(21642): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 02 03:21:41 root maldet(21642): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 02 03:21:41 root maldet(21642): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 02 03:21:41 root maldet(21642): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 02 03:21:41 root maldet(21642): {sigup} verified md5sum of maldet-sigpack.tgz Dec 02 03:21:42 root maldet(21642): {sigup} unpacked and installed maldet-sigpack.tgz Dec 02 03:21:42 root maldet(21642): {sigup} verified md5sum of maldet-clean.tgz Dec 02 03:21:42 root maldet(21642): {sigup} unpacked and installed maldet-clean.tgz Dec 02 03:21:42 root maldet(21642): {sigup} signature set update completed Dec 02 03:21:42 root maldet(21642): {sigup} 17330 signatures (14493 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 02 03:21:42 root maldet(21913): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 02 03:21:42 root maldet(21913): {scan} signatures loaded: 17330 (14493 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 02 03:21:42 root maldet(21913): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 02 03:21:42 root maldet(21913): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 02 03:21:42 root maldet(21913): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 02 03:21:49 root maldet(21913): {scan} file list completed in 7s, found 6844 files... Dec 02 03:21:49 root maldet(21913): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 02 03:21:49 root maldet(21913): {scan} scan of (6844 files) in progress... Dec 02 03:22:30 root maldet(21913): {scan} scan completed on : files 6844, malware hits 0, cleaned hits 0, time 48s Dec 02 03:22:30 root maldet(21913): {scan} scan report saved, to view run: maldet --report 221202-0321.21913 Dec 03 03:21:10 root maldet(10938): {update} checking for available updates... Dec 03 03:21:11 root maldet(10938): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 03 03:21:11 root maldet(10938): {update} hashing install files and checking against server... Dec 03 03:21:11 root maldet(10938): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 03 03:21:11 root maldet(10938): {update} latest version already installed. Dec 03 03:21:11 root maldet(11090): {sigup} performing signature update check... Dec 03 03:21:11 root maldet(11090): {sigup} local signature set is version 202212012220961 Dec 03 03:21:12 root maldet(11090): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 03 03:21:12 root maldet(11090): {sigup} latest signature set already installed Dec 03 03:21:12 root maldet(11206): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 03 03:21:12 root maldet(11206): {scan} signatures loaded: 17330 (14493 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 03 03:21:12 root maldet(11206): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 03 03:21:12 root maldet(11206): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 03 03:21:12 root maldet(11206): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 03 03:21:18 root maldet(11206): {scan} file list completed in 6s, found 1155 files... Dec 03 03:21:18 root maldet(11206): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 03 03:21:18 root maldet(11206): {scan} scan of (1155 files) in progress... Dec 03 03:21:49 root maldet(11206): {hit} malware hit {YARA}php_in_image found for /home/growthpharma/public_html/Master@Growth/page/221203002931_PAGE.jpg Dec 03 03:21:49 root maldet(11206): {quar} malware quarantined from '/home/growthpharma/public_html/Master@Growth/page/221203002931_PAGE.jpg' to '/usr/local/maldetect/quarantine/221203002931_PAGE.jpg.2437032603' Dec 03 03:21:50 root maldet(11206): {scan} scan completed on : files 1155, malware hits 1, cleaned hits 0, time 37s Dec 03 03:21:50 root maldet(11206): {scan} scan report saved, to view run: maldet --report 221203-0321.11206 Dec 04 03:19:21 root maldet(20938): {update} checking for available updates... Dec 04 03:19:21 root maldet(20938): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 04 03:19:21 root maldet(20938): {update} hashing install files and checking against server... Dec 04 03:19:21 root maldet(20938): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 04 03:19:21 root maldet(20938): {update} latest version already installed. Dec 04 03:19:21 root maldet(21079): {sigup} performing signature update check... Dec 04 03:19:21 root maldet(21079): {sigup} local signature set is version 202212012220961 Dec 04 03:19:22 root maldet(21079): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 04 03:19:22 root maldet(21079): {sigup} latest signature set already installed Dec 04 03:19:22 root maldet(21197): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 04 03:19:22 root maldet(21197): {scan} signatures loaded: 17330 (14493 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 04 03:19:22 root maldet(21197): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 04 03:19:22 root maldet(21197): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 04 03:19:22 root maldet(21197): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 04 03:19:28 root maldet(21197): {scan} file list completed in 6s, found 328 files... Dec 04 03:19:28 root maldet(21197): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 04 03:19:28 root maldet(21197): {scan} scan of (328 files) in progress... Dec 04 03:19:44 root maldet(21197): {scan} scan completed on : files 328, malware hits 0, cleaned hits 0, time 22s Dec 04 03:19:44 root maldet(21197): {scan} scan report saved, to view run: maldet --report 221204-0319.21197 Dec 05 03:36:11 root maldet(27166): {update} checking for available updates... Dec 05 03:36:11 root maldet(27166): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 05 03:36:11 root maldet(27166): {update} hashing install files and checking against server... Dec 05 03:36:12 root maldet(27166): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 05 03:36:12 root maldet(27166): {update} latest version already installed. Dec 05 03:36:12 root maldet(27305): {sigup} performing signature update check... Dec 05 03:36:12 root maldet(27305): {sigup} local signature set is version 202212012220961 Dec 05 03:36:12 root maldet(27305): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 05 03:36:13 root maldet(27305): {sigup} new signature set 202212042982771 available Dec 05 03:36:13 root maldet(27305): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 05 03:36:13 root maldet(27305): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 05 03:36:13 root maldet(27305): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 05 03:36:13 root maldet(27305): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 05 03:36:13 root maldet(27305): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 05 03:36:13 root maldet(27305): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 05 03:36:13 root maldet(27305): {sigup} verified md5sum of maldet-sigpack.tgz Dec 05 03:36:14 root maldet(27305): {sigup} unpacked and installed maldet-sigpack.tgz Dec 05 03:36:14 root maldet(27305): {sigup} verified md5sum of maldet-clean.tgz Dec 05 03:36:14 root maldet(27305): {sigup} unpacked and installed maldet-clean.tgz Dec 05 03:36:14 root maldet(27305): {sigup} signature set update completed Dec 05 03:36:14 root maldet(27305): {sigup} 17331 signatures (14494 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 05 03:36:14 root maldet(27567): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 05 03:36:14 root maldet(27567): {scan} signatures loaded: 17331 (14494 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 05 03:36:14 root maldet(27567): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 05 03:36:14 root maldet(27567): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 05 03:36:14 root maldet(27567): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 05 03:36:21 root maldet(27567): {scan} file list completed in 7s, found 351 files... Dec 05 03:36:21 root maldet(27567): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 05 03:36:21 root maldet(27567): {scan} scan of (351 files) in progress... Dec 05 03:36:41 root maldet(27567): {scan} scan completed on : files 351, malware hits 0, cleaned hits 0, time 27s Dec 05 03:36:41 root maldet(27567): {scan} scan report saved, to view run: maldet --report 221205-0336.27567 Dec 06 03:31:39 root maldet(31065): {update} checking for available updates... Dec 06 03:31:39 root maldet(31065): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 06 03:31:39 root maldet(31065): {update} hashing install files and checking against server... Dec 06 03:31:40 root maldet(31065): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 06 03:31:40 root maldet(31065): {update} latest version already installed. Dec 06 03:31:40 root maldet(31209): {sigup} performing signature update check... Dec 06 03:31:40 root maldet(31209): {sigup} local signature set is version 202212042982771 Dec 06 03:31:40 root maldet(31209): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 06 03:31:40 root maldet(31209): {sigup} latest signature set already installed Dec 06 03:31:40 root maldet(31323): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 06 03:31:40 root maldet(31323): {scan} signatures loaded: 17331 (14494 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 06 03:31:40 root maldet(31323): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 06 03:31:40 root maldet(31323): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 06 03:31:40 root maldet(31323): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 06 03:31:46 root maldet(31323): {scan} file list completed in 6s, found 141 files... Dec 06 03:31:47 root maldet(31323): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 06 03:31:47 root maldet(31323): {scan} scan of (141 files) in progress... Dec 06 03:32:04 root maldet(31323): {scan} scan completed on : files 141, malware hits 0, cleaned hits 0, time 24s Dec 06 03:32:04 root maldet(31323): {scan} scan report saved, to view run: maldet --report 221206-0331.31323 Dec 07 03:52:16 root maldet(22676): {update} checking for available updates... Dec 07 03:52:17 root maldet(22676): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 07 03:52:17 root maldet(22676): {update} hashing install files and checking against server... Dec 07 03:52:17 root maldet(22676): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 07 03:52:17 root maldet(22676): {update} latest version already installed. Dec 07 03:52:17 root maldet(22818): {sigup} performing signature update check... Dec 07 03:52:17 root maldet(22818): {sigup} local signature set is version 202212042982771 Dec 07 03:52:18 root maldet(22818): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 07 03:52:18 root maldet(22818): {sigup} latest signature set already installed Dec 07 03:52:18 root maldet(22957): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 07 03:52:19 root maldet(22957): {scan} signatures loaded: 17331 (14494 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 07 03:52:19 root maldet(22957): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 07 03:52:19 root maldet(22957): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 07 03:52:19 root maldet(22957): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 07 03:52:25 root maldet(22957): {scan} file list completed in 6s, found 29190 files... Dec 07 03:52:25 root maldet(22957): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 07 03:52:25 root maldet(22957): {scan} scan of (29190 files) in progress... Dec 07 03:54:07 root maldet(22957): {hit} malware hit {HEX}php.generic.malware.446 found for /home/bestdealmachiner/public_html/Master@Bestdeal/index.php Dec 07 03:54:08 root maldet(22957): {quar} malware quarantined from '/home/bestdealmachiner/public_html/Master@Bestdeal/index.php' to '/usr/local/maldetect/quarantine/index.php.1607429920' Dec 07 03:54:09 root maldet(22957): {scan} scan completed on : files 29190, malware hits 1, cleaned hits 0, time 110s Dec 07 03:54:09 root maldet(22957): {scan} scan report saved, to view run: maldet --report 221207-0352.22957 Dec 08 03:56:31 root maldet(27004): {update} checking for available updates... Dec 08 03:56:31 root maldet(27004): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 08 03:56:31 root maldet(27004): {update} hashing install files and checking against server... Dec 08 03:56:32 root maldet(27004): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 08 03:56:32 root maldet(27004): {update} latest version already installed. Dec 08 03:56:32 root maldet(27153): {sigup} performing signature update check... Dec 08 03:56:32 root maldet(27153): {sigup} local signature set is version 202212042982771 Dec 08 03:56:32 root maldet(27153): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 08 03:56:32 root maldet(27153): {sigup} new signature set 20221207571710 available Dec 08 03:56:32 root maldet(27153): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 08 03:56:32 root maldet(27153): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 08 03:56:32 root maldet(27153): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 08 03:56:32 root maldet(27153): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 08 03:56:33 root maldet(27153): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 08 03:56:33 root maldet(27153): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 08 03:56:33 root maldet(27153): {sigup} verified md5sum of maldet-sigpack.tgz Dec 08 03:56:34 root maldet(27153): {sigup} unpacked and installed maldet-sigpack.tgz Dec 08 03:56:34 root maldet(27153): {sigup} verified md5sum of maldet-clean.tgz Dec 08 03:56:34 root maldet(27153): {sigup} unpacked and installed maldet-clean.tgz Dec 08 03:56:34 root maldet(27153): {sigup} signature set update completed Dec 08 03:56:34 root maldet(27153): {sigup} 17331 signatures (14494 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 08 03:56:34 root maldet(27409): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 08 03:56:34 root maldet(27409): {scan} signatures loaded: 17331 (14494 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 08 03:56:34 root maldet(27409): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 08 03:56:34 root maldet(27409): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 08 03:56:34 root maldet(27409): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 08 03:56:41 root maldet(27409): {scan} file list completed in 7s, found 2858 files... Dec 08 03:56:41 root maldet(27409): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 08 03:56:41 root maldet(27409): {scan} scan of (2858 files) in progress... Dec 08 03:57:00 root maldet(27409): {scan} scan completed on : files 2858, malware hits 0, cleaned hits 0, time 26s Dec 08 03:57:00 root maldet(27409): {scan} scan report saved, to view run: maldet --report 221208-0356.27409 Dec 09 03:23:58 root maldet(21366): {update} checking for available updates... Dec 09 03:23:58 root maldet(21366): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 09 03:23:58 root maldet(21366): {update} hashing install files and checking against server... Dec 09 03:23:58 root maldet(21366): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 09 03:23:58 root maldet(21366): {update} latest version already installed. Dec 09 03:23:58 root maldet(21512): {sigup} performing signature update check... Dec 09 03:23:58 root maldet(21512): {sigup} local signature set is version 20221207571710 Dec 09 03:23:58 root maldet(21512): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 09 03:23:58 root maldet(21512): {sigup} latest signature set already installed Dec 09 03:23:59 root maldet(21634): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 09 03:23:59 root maldet(21634): {scan} signatures loaded: 17331 (14494 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 09 03:23:59 root maldet(21634): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 09 03:23:59 root maldet(21634): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 09 03:23:59 root maldet(21634): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 09 03:24:06 root maldet(21634): {scan} file list completed in 7s, found 207 files... Dec 09 03:24:06 root maldet(21634): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 09 03:24:06 root maldet(21634): {scan} scan of (207 files) in progress... Dec 09 03:24:21 root maldet(21634): {scan} scan completed on : files 207, malware hits 0, cleaned hits 0, time 22s Dec 09 03:24:21 root maldet(21634): {scan} scan report saved, to view run: maldet --report 221209-0323.21634 Dec 10 03:26:32 root maldet(13166): {update} checking for available updates... Dec 10 03:26:32 root maldet(13166): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 10 03:26:32 root maldet(13166): {update} hashing install files and checking against server... Dec 10 03:26:32 root maldet(13166): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 10 03:26:32 root maldet(13166): {update} latest version already installed. Dec 10 03:26:32 root maldet(13322): {sigup} performing signature update check... Dec 10 03:26:32 root maldet(13322): {sigup} local signature set is version 20221207571710 Dec 10 03:26:34 root maldet(13322): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 10 03:26:34 root maldet(13322): {sigup} latest signature set already installed Dec 10 03:26:34 root maldet(13507): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 10 03:26:34 root maldet(13507): {scan} signatures loaded: 17331 (14494 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 10 03:26:34 root maldet(13507): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 10 03:26:34 root maldet(13507): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 10 03:26:34 root maldet(13507): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 10 03:26:41 root maldet(13507): {scan} file list completed in 7s, found 142 files... Dec 10 03:26:41 root maldet(13507): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 10 03:26:41 root maldet(13507): {scan} scan of (142 files) in progress... Dec 10 03:26:54 root maldet(13507): {scan} scan completed on : files 142, malware hits 0, cleaned hits 0, time 20s Dec 10 03:26:54 root maldet(13507): {scan} scan report saved, to view run: maldet --report 221210-0326.13507 Dec 11 03:39:12 root maldet(26729): {update} checking for available updates... Dec 11 03:39:13 root maldet(26729): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 11 03:39:13 root maldet(26729): {update} hashing install files and checking against server... Dec 11 03:39:13 root maldet(26729): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 11 03:39:13 root maldet(26729): {update} latest version already installed. Dec 11 03:39:13 root maldet(26881): {sigup} performing signature update check... Dec 11 03:39:13 root maldet(26881): {sigup} local signature set is version 20221207571710 Dec 11 03:39:17 root maldet(26881): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 11 03:39:17 root maldet(26881): {sigup} new signature set 202212101249734 available Dec 11 03:39:17 root maldet(26881): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 11 03:39:17 root maldet(26881): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 11 03:39:18 root maldet(26881): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 11 03:39:18 root maldet(26881): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 11 03:39:18 root maldet(26881): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 11 03:39:18 root maldet(26881): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 11 03:39:18 root maldet(26881): {sigup} verified md5sum of maldet-sigpack.tgz Dec 11 03:39:18 root maldet(26881): {sigup} unpacked and installed maldet-sigpack.tgz Dec 11 03:39:19 root maldet(26881): {sigup} verified md5sum of maldet-clean.tgz Dec 11 03:39:19 root maldet(26881): {sigup} unpacked and installed maldet-clean.tgz Dec 11 03:39:19 root maldet(26881): {sigup} signature set update completed Dec 11 03:39:19 root maldet(26881): {sigup} 17332 signatures (14495 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 11 03:39:19 root maldet(27172): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 11 03:39:19 root maldet(27172): {scan} signatures loaded: 17332 (14495 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 11 03:39:19 root maldet(27172): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 11 03:39:19 root maldet(27172): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 11 03:39:19 root maldet(27172): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 11 03:39:28 root maldet(27172): {scan} file list completed in 9s, found 139 files... Dec 11 03:39:28 root maldet(27172): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 11 03:39:28 root maldet(27172): {scan} scan of (139 files) in progress... Dec 11 03:39:51 root maldet(27172): {scan} scan completed on : files 139, malware hits 0, cleaned hits 0, time 32s Dec 11 03:39:51 root maldet(27172): {scan} scan report saved, to view run: maldet --report 221211-0339.27172 Dec 12 03:48:02 root maldet(14013): {update} checking for available updates... Dec 12 03:48:02 root maldet(14013): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 12 03:48:02 root maldet(14013): {update} hashing install files and checking against server... Dec 12 03:48:03 root maldet(14013): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 12 03:48:03 root maldet(14013): {update} latest version already installed. Dec 12 03:48:03 root maldet(14163): {sigup} performing signature update check... Dec 12 03:48:03 root maldet(14163): {sigup} local signature set is version 202212101249734 Dec 12 03:48:03 root maldet(14163): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 12 03:48:03 root maldet(14163): {sigup} latest signature set already installed Dec 12 03:48:03 root maldet(14292): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 12 03:48:04 root maldet(14292): {scan} signatures loaded: 17332 (14495 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 12 03:48:04 root maldet(14292): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 12 03:48:04 root maldet(14292): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 12 03:48:04 root maldet(14292): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 12 03:48:12 root maldet(14292): {scan} file list completed in 7s, found 126 files... Dec 12 03:48:12 root maldet(14292): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 12 03:48:12 root maldet(14292): {scan} scan of (126 files) in progress... Dec 12 03:48:32 root maldet(14292): {scan} scan completed on : files 126, malware hits 0, cleaned hits 0, time 29s Dec 12 03:48:32 root maldet(14292): {scan} scan report saved, to view run: maldet --report 221212-0348.14292 Dec 13 03:38:50 root maldet(19341): {update} checking for available updates... Dec 13 03:38:51 root maldet(19341): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 13 03:38:51 root maldet(19341): {update} hashing install files and checking against server... Dec 13 03:38:51 root maldet(19341): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 13 03:38:51 root maldet(19341): {update} latest version already installed. Dec 13 03:38:51 root maldet(19478): {sigup} performing signature update check... Dec 13 03:38:51 root maldet(19478): {sigup} local signature set is version 202212101249734 Dec 13 03:38:52 root maldet(19478): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 13 03:38:52 root maldet(19478): {sigup} latest signature set already installed Dec 13 03:38:52 root maldet(19599): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 13 03:38:52 root maldet(19599): {scan} signatures loaded: 17332 (14495 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 13 03:38:52 root maldet(19599): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 13 03:38:52 root maldet(19599): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 13 03:38:52 root maldet(19599): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 13 03:39:00 root maldet(19599): {scan} file list completed in 8s, found 103 files... Dec 13 03:39:00 root maldet(19599): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 13 03:39:00 root maldet(19599): {scan} scan of (103 files) in progress... Dec 13 03:39:24 root maldet(19599): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Dec 13 03:39:24 root maldet(19599): {scan} scan completed on : files 103, malware hits 0, cleaned hits 0, time 32s Dec 13 03:39:24 root maldet(19599): {scan} scan report saved, to view run: maldet --report 221213-0338.19599 Dec 14 03:53:28 root maldet(26760): {update} checking for available updates... Dec 14 03:53:28 root maldet(26760): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 14 03:53:28 root maldet(26760): {update} hashing install files and checking against server... Dec 14 03:53:29 root maldet(26760): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 14 03:53:29 root maldet(26760): {update} latest version already installed. Dec 14 03:53:29 root maldet(26902): {sigup} performing signature update check... Dec 14 03:53:29 root maldet(26902): {sigup} local signature set is version 202212101249734 Dec 14 03:53:30 root maldet(26902): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 14 03:53:30 root maldet(26902): {sigup} new signature set 202212131927301 available Dec 14 03:53:30 root maldet(26902): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 14 03:53:30 root maldet(26902): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 14 03:53:30 root maldet(26902): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 14 03:53:30 root maldet(26902): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 14 03:53:31 root maldet(26902): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 14 03:53:31 root maldet(26902): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 14 03:53:31 root maldet(26902): {sigup} verified md5sum of maldet-sigpack.tgz Dec 14 03:53:35 root maldet(26902): {sigup} unpacked and installed maldet-sigpack.tgz Dec 14 03:53:35 root maldet(26902): {sigup} verified md5sum of maldet-clean.tgz Dec 14 03:53:35 root maldet(26902): {sigup} unpacked and installed maldet-clean.tgz Dec 14 03:53:35 root maldet(26902): {sigup} signature set update completed Dec 14 03:53:35 root maldet(26902): {sigup} 17332 signatures (14495 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 14 03:53:35 root maldet(27195): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 14 03:53:35 root maldet(27195): {scan} signatures loaded: 17332 (14495 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 14 03:53:35 root maldet(27195): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 14 03:53:35 root maldet(27195): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 14 03:53:35 root maldet(27195): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 14 03:53:43 root maldet(27195): {scan} file list completed in 8s, found 4504 files... Dec 14 03:53:43 root maldet(27195): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 14 03:53:43 root maldet(27195): {scan} scan of (4504 files) in progress... Dec 14 03:54:58 root maldet(27195): {scan} scan completed on : files 4504, malware hits 0, cleaned hits 0, time 82s Dec 14 03:54:58 root maldet(27195): {scan} scan report saved, to view run: maldet --report 221214-0353.27195 Dec 15 03:57:34 root maldet(1408): {update} checking for available updates... Dec 15 03:57:34 root maldet(1408): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 15 03:57:34 root maldet(1408): {update} hashing install files and checking against server... Dec 15 03:57:35 root maldet(1408): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 15 03:57:35 root maldet(1408): {update} latest version already installed. Dec 15 03:57:35 root maldet(1566): {sigup} performing signature update check... Dec 15 03:57:35 root maldet(1566): {sigup} local signature set is version 202212131927301 Dec 15 03:57:35 root maldet(1566): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 15 03:57:35 root maldet(1566): {sigup} latest signature set already installed Dec 15 03:57:35 root maldet(1682): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 15 03:57:35 root maldet(1682): {scan} signatures loaded: 17332 (14495 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 15 03:57:35 root maldet(1682): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 15 03:57:35 root maldet(1682): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 15 03:57:35 root maldet(1682): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 15 03:58:15 root maldet(1682): {scan} file list completed in 40s, found 5767 files... Dec 15 03:58:15 root maldet(1682): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 15 03:58:15 root maldet(1682): {scan} scan of (5767 files) in progress... Dec 15 03:59:29 root maldet(1682): {scan} scan completed on : files 5767, malware hits 0, cleaned hits 0, time 114s Dec 15 03:59:29 root maldet(1682): {scan} scan report saved, to view run: maldet --report 221215-0357.1682 Dec 16 03:16:11 root maldet(23496): {update} checking for available updates... Dec 16 03:16:12 root maldet(23496): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 16 03:16:12 root maldet(23496): {update} hashing install files and checking against server... Dec 16 03:16:12 root maldet(23496): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 16 03:16:12 root maldet(23496): {update} latest version already installed. Dec 16 03:16:12 root maldet(23644): {sigup} performing signature update check... Dec 16 03:16:12 root maldet(23644): {sigup} local signature set is version 202212131927301 Dec 16 03:16:12 root maldet(23644): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 16 03:16:12 root maldet(23644): {sigup} latest signature set already installed Dec 16 03:16:12 root maldet(23766): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 16 03:16:12 root maldet(23766): {scan} signatures loaded: 17332 (14495 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 16 03:16:12 root maldet(23766): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 16 03:16:12 root maldet(23766): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 16 03:16:12 root maldet(23766): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 16 03:16:19 root maldet(23766): {scan} file list completed in 7s, found 266 files... Dec 16 03:16:19 root maldet(23766): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 16 03:16:19 root maldet(23766): {scan} scan of (266 files) in progress... Dec 16 03:18:14 root maldet(23766): {scan} scan completed on : files 266, malware hits 0, cleaned hits 0, time 122s Dec 16 03:18:14 root maldet(23766): {scan} scan report saved, to view run: maldet --report 221216-0316.23766 Dec 17 03:16:11 root maldet(25953): {update} checking for available updates... Dec 17 03:16:11 root maldet(25953): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 17 03:16:11 root maldet(25953): {update} hashing install files and checking against server... Dec 17 03:16:12 root maldet(25953): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 17 03:16:12 root maldet(25953): {update} latest version already installed. Dec 17 03:16:12 root maldet(26123): {sigup} performing signature update check... Dec 17 03:16:12 root maldet(26123): {sigup} local signature set is version 202212131927301 Dec 17 03:16:12 root maldet(26123): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 17 03:16:12 root maldet(26123): {sigup} new signature set 202212162611116 available Dec 17 03:16:12 root maldet(26123): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 17 03:16:12 root maldet(26123): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 17 03:16:12 root maldet(26123): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 17 03:16:12 root maldet(26123): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 17 03:16:13 root maldet(26123): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 17 03:16:13 root maldet(26123): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 17 03:16:13 root maldet(26123): {sigup} verified md5sum of maldet-sigpack.tgz Dec 17 03:16:13 root maldet(26123): {sigup} unpacked and installed maldet-sigpack.tgz Dec 17 03:16:13 root maldet(26123): {sigup} verified md5sum of maldet-clean.tgz Dec 17 03:16:13 root maldet(26123): {sigup} unpacked and installed maldet-clean.tgz Dec 17 03:16:13 root maldet(26123): {sigup} signature set update completed Dec 17 03:16:13 root maldet(26123): {sigup} 17363 signatures (14526 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 17 03:16:13 root maldet(26384): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 17 03:16:13 root maldet(26384): {scan} signatures loaded: 17363 (14526 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 17 03:16:13 root maldet(26384): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 17 03:16:13 root maldet(26384): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 17 03:16:13 root maldet(26384): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 17 03:16:20 root maldet(26384): {scan} file list completed in 7s, found 228 files... Dec 17 03:16:20 root maldet(26384): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 17 03:16:20 root maldet(26384): {scan} scan of (228 files) in progress... Dec 17 03:16:34 root maldet(26384): {scan} scan completed on : files 228, malware hits 0, cleaned hits 0, time 21s Dec 17 03:16:34 root maldet(26384): {scan} scan report saved, to view run: maldet --report 221217-0316.26384 Dec 18 04:03:42 root maldet(13630): {update} checking for available updates... Dec 18 04:03:42 root maldet(13630): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 18 04:03:42 root maldet(13630): {update} hashing install files and checking against server... Dec 18 04:03:43 root maldet(13630): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 18 04:03:43 root maldet(13630): {update} latest version already installed. Dec 18 04:03:43 root maldet(13801): {sigup} performing signature update check... Dec 18 04:03:43 root maldet(13801): {sigup} local signature set is version 202212162611116 Dec 18 04:03:43 root maldet(13801): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 18 04:03:43 root maldet(13801): {sigup} latest signature set already installed Dec 18 04:03:43 root maldet(13930): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 18 04:03:43 root maldet(13930): {scan} signatures loaded: 17363 (14526 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 18 04:03:43 root maldet(13930): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 18 04:03:43 root maldet(13930): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 18 04:03:43 root maldet(13930): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 18 04:03:50 root maldet(13930): {scan} file list completed in 7s, found 615 files... Dec 18 04:03:50 root maldet(13930): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 18 04:03:50 root maldet(13930): {scan} scan of (615 files) in progress... Dec 18 04:04:12 root maldet(13930): {scan} scan completed on : files 615, malware hits 0, cleaned hits 0, time 29s Dec 18 04:04:12 root maldet(13930): {scan} scan report saved, to view run: maldet --report 221218-0403.13930 Dec 19 03:39:41 root maldet(21694): {update} checking for available updates... Dec 19 03:39:41 root maldet(21694): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 19 03:39:41 root maldet(21694): {update} hashing install files and checking against server... Dec 19 03:39:41 root maldet(21694): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 19 03:39:41 root maldet(21694): {update} latest version already installed. Dec 19 03:39:41 root maldet(21832): {sigup} performing signature update check... Dec 19 03:39:41 root maldet(21832): {sigup} local signature set is version 202212162611116 Dec 19 03:39:41 root maldet(21832): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 19 03:39:41 root maldet(21832): {sigup} latest signature set already installed Dec 19 03:39:42 root maldet(21952): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 19 03:39:42 root maldet(21952): {scan} signatures loaded: 17363 (14526 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 19 03:39:42 root maldet(21952): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 19 03:39:42 root maldet(21952): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 19 03:39:42 root maldet(21952): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 19 03:39:49 root maldet(21952): {scan} file list completed in 7s, found 107 files... Dec 19 03:39:49 root maldet(21952): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 19 03:39:49 root maldet(21952): {scan} scan of (107 files) in progress... Dec 19 03:40:02 root maldet(21952): {scan} scan completed on : files 107, malware hits 0, cleaned hits 0, time 20s Dec 19 03:40:02 root maldet(21952): {scan} scan report saved, to view run: maldet --report 221219-0339.21952 Dec 20 03:18:24 root maldet(18257): {update} checking for available updates... Dec 20 03:18:25 root maldet(18257): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 20 03:18:25 root maldet(18257): {update} hashing install files and checking against server... Dec 20 03:18:25 root maldet(18257): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 20 03:18:25 root maldet(18257): {update} latest version already installed. Dec 20 03:18:25 root maldet(18400): {sigup} performing signature update check... Dec 20 03:18:25 root maldet(18400): {sigup} local signature set is version 202212162611116 Dec 20 03:18:25 root maldet(18400): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 20 03:18:25 root maldet(18400): {sigup} new signature set 20221219526765 available Dec 20 03:18:25 root maldet(18400): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 20 03:18:25 root maldet(18400): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 20 03:18:26 root maldet(18400): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 20 03:18:26 root maldet(18400): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 20 03:18:26 root maldet(18400): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 20 03:18:26 root maldet(18400): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 20 03:18:26 root maldet(18400): {sigup} verified md5sum of maldet-sigpack.tgz Dec 20 03:18:26 root maldet(18400): {sigup} unpacked and installed maldet-sigpack.tgz Dec 20 03:18:26 root maldet(18400): {sigup} verified md5sum of maldet-clean.tgz Dec 20 03:18:26 root maldet(18400): {sigup} unpacked and installed maldet-clean.tgz Dec 20 03:18:26 root maldet(18400): {sigup} signature set update completed Dec 20 03:18:26 root maldet(18400): {sigup} 17363 signatures (14526 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 20 03:18:26 root maldet(18662): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 20 03:18:27 root maldet(18662): {scan} signatures loaded: 17363 (14526 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 20 03:18:27 root maldet(18662): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 20 03:18:27 root maldet(18662): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 20 03:18:27 root maldet(18662): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 20 03:18:34 root maldet(18662): {scan} file list completed in 7s, found 130 files... Dec 20 03:18:34 root maldet(18662): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 20 03:18:34 root maldet(18662): {scan} scan of (130 files) in progress... Dec 20 03:18:48 root maldet(18662): {scan} scan completed on : files 130, malware hits 0, cleaned hits 0, time 22s Dec 20 03:18:48 root maldet(18662): {scan} scan report saved, to view run: maldet --report 221220-0318.18662 Dec 21 03:34:33 root maldet(3860): {update} checking for available updates... Dec 21 03:34:33 root maldet(3860): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 21 03:34:33 root maldet(3860): {update} hashing install files and checking against server... Dec 21 03:34:34 root maldet(3860): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 21 03:34:34 root maldet(3860): {update} latest version already installed. Dec 21 03:34:34 root maldet(4021): {sigup} performing signature update check... Dec 21 03:34:34 root maldet(4021): {sigup} local signature set is version 20221219526765 Dec 21 03:34:34 root maldet(4021): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 21 03:34:34 root maldet(4021): {sigup} latest signature set already installed Dec 21 03:34:34 root maldet(4139): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 21 03:34:34 root maldet(4139): {scan} signatures loaded: 17363 (14526 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 21 03:34:34 root maldet(4139): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 21 03:34:34 root maldet(4139): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 21 03:34:34 root maldet(4139): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 21 03:34:41 root maldet(4139): {scan} file list completed in 7s, found 1620 files... Dec 21 03:34:41 root maldet(4139): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 21 03:34:41 root maldet(4139): {scan} scan of (1620 files) in progress... Dec 21 03:35:31 root maldet(4139): {hit} malware hit {HEX}php.base64.inject.181 found for /home/onlinecfo/public_html/wp-cc.php Dec 21 03:35:31 root maldet(4139): {quar} malware quarantined from '/home/onlinecfo/public_html/wp-cc.php' to '/usr/local/maldetect/quarantine/wp-cc.php.3207811661' Dec 21 03:35:31 root maldet(4139): {scan} scan completed on : files 1620, malware hits 1, cleaned hits 0, time 57s Dec 21 03:35:32 root maldet(4139): {scan} scan report saved, to view run: maldet --report 221221-0334.4139 Dec 22 03:16:23 root maldet(20359): {update} checking for available updates... Dec 22 03:16:23 root maldet(20359): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 22 03:16:23 root maldet(20359): {update} hashing install files and checking against server... Dec 22 03:16:23 root maldet(20359): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 22 03:16:23 root maldet(20359): {update} latest version already installed. Dec 22 03:16:23 root maldet(20509): {sigup} performing signature update check... Dec 22 03:16:23 root maldet(20509): {sigup} local signature set is version 20221219526765 Dec 22 03:16:23 root maldet(20509): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 22 03:16:23 root maldet(20509): {sigup} latest signature set already installed Dec 22 03:16:24 root maldet(20632): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 22 03:16:24 root maldet(20632): {scan} signatures loaded: 17363 (14526 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 22 03:16:24 root maldet(20632): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 22 03:16:24 root maldet(20632): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 22 03:16:24 root maldet(20632): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 22 03:16:30 root maldet(20632): {scan} file list completed in 6s, found 3115 files... Dec 22 03:16:31 root maldet(20632): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 22 03:16:31 root maldet(20632): {scan} scan of (3115 files) in progress... Dec 22 03:17:16 root maldet(20632): {scan} scan completed on : files 3115, malware hits 0, cleaned hits 0, time 52s Dec 22 03:17:16 root maldet(20632): {scan} scan report saved, to view run: maldet --report 221222-0316.20632 Dec 23 03:45:20 root maldet(29773): {update} checking for available updates... Dec 23 03:45:20 root maldet(29773): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 23 03:45:21 root maldet(29773): {update} hashing install files and checking against server... Dec 23 03:45:21 root maldet(29773): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 23 03:45:21 root maldet(29773): {update} latest version already installed. Dec 23 03:45:21 root maldet(29911): {sigup} performing signature update check... Dec 23 03:45:21 root maldet(29911): {sigup} local signature set is version 20221219526765 Dec 23 03:45:21 root maldet(29911): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 23 03:45:21 root maldet(29911): {sigup} new signature set 202212221231785 available Dec 23 03:45:21 root maldet(29911): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 23 03:45:21 root maldet(29911): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 23 03:45:22 root maldet(29911): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 23 03:45:22 root maldet(29911): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 23 03:45:22 root maldet(29911): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 23 03:45:22 root maldet(29911): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 23 03:45:22 root maldet(29911): {sigup} verified md5sum of maldet-sigpack.tgz Dec 23 03:45:22 root maldet(29911): {sigup} unpacked and installed maldet-sigpack.tgz Dec 23 03:45:22 root maldet(29911): {sigup} verified md5sum of maldet-clean.tgz Dec 23 03:45:22 root maldet(29911): {sigup} unpacked and installed maldet-clean.tgz Dec 23 03:45:22 root maldet(29911): {sigup} signature set update completed Dec 23 03:45:22 root maldet(29911): {sigup} 17364 signatures (14527 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 23 03:45:22 root maldet(30177): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 23 03:45:23 root maldet(30177): {scan} signatures loaded: 17364 (14527 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 23 03:45:23 root maldet(30177): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 23 03:45:23 root maldet(30177): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 23 03:45:23 root maldet(30177): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 23 03:45:29 root maldet(30177): {scan} file list completed in 6s, found 1506 files... Dec 23 03:45:29 root maldet(30177): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 23 03:45:29 root maldet(30177): {scan} scan of (1506 files) in progress... Dec 23 03:45:57 root maldet(30177): {scan} scan completed on : files 1506, malware hits 0, cleaned hits 0, time 34s Dec 23 03:45:57 root maldet(30177): {scan} scan report saved, to view run: maldet --report 221223-0345.30177 Dec 24 03:24:08 root maldet(28911): {update} checking for available updates... Dec 24 03:24:09 root maldet(28911): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 24 03:24:09 root maldet(28911): {update} hashing install files and checking against server... Dec 24 03:24:09 root maldet(28911): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 24 03:24:09 root maldet(28911): {update} latest version already installed. Dec 24 03:24:09 root maldet(29067): {sigup} performing signature update check... Dec 24 03:24:09 root maldet(29067): {sigup} local signature set is version 202212221231785 Dec 24 03:24:10 root maldet(29067): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 24 03:24:10 root maldet(29067): {sigup} latest signature set already installed Dec 24 03:24:10 root maldet(29191): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 24 03:24:10 root maldet(29191): {scan} signatures loaded: 17364 (14527 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 24 03:24:10 root maldet(29191): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 24 03:24:10 root maldet(29191): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 24 03:24:10 root maldet(29191): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 24 03:24:17 root maldet(29191): {scan} file list completed in 7s, found 2139 files... Dec 24 03:24:17 root maldet(29191): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 24 03:24:17 root maldet(29191): {scan} scan of (2139 files) in progress... Dec 24 03:25:00 root maldet(29191): {scan} scan completed on : files 2139, malware hits 0, cleaned hits 0, time 50s Dec 24 03:25:00 root maldet(29191): {scan} scan report saved, to view run: maldet --report 221224-0324.29191 Dec 25 03:46:17 root maldet(17638): {update} checking for available updates... Dec 25 03:46:17 root maldet(17638): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 25 03:46:18 root maldet(17638): {update} hashing install files and checking against server... Dec 25 03:46:18 root maldet(17638): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 25 03:46:18 root maldet(17638): {update} latest version already installed. Dec 25 03:46:18 root maldet(17798): {sigup} performing signature update check... Dec 25 03:46:18 root maldet(17798): {sigup} local signature set is version 202212221231785 Dec 25 03:46:18 root maldet(17798): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 25 03:46:18 root maldet(17798): {sigup} latest signature set already installed Dec 25 03:46:18 root maldet(17918): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 25 03:46:19 root maldet(17918): {scan} signatures loaded: 17364 (14527 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 25 03:46:19 root maldet(17918): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 25 03:46:19 root maldet(17918): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 25 03:46:19 root maldet(17918): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 25 03:46:25 root maldet(17918): {scan} file list completed in 6s, found 260 files... Dec 25 03:46:25 root maldet(17918): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 25 03:46:25 root maldet(17918): {scan} scan of (260 files) in progress... Dec 25 03:46:42 root maldet(17918): {scan} scan completed on : files 260, malware hits 0, cleaned hits 0, time 24s Dec 25 03:46:42 root maldet(17918): {scan} scan report saved, to view run: maldet --report 221225-0346.17918 Dec 26 03:54:16 root maldet(12112): {update} checking for available updates... Dec 26 03:54:16 root maldet(12112): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 26 03:54:16 root maldet(12112): {update} hashing install files and checking against server... Dec 26 03:54:16 root maldet(12112): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 26 03:54:16 root maldet(12112): {update} latest version already installed. Dec 26 03:54:16 root maldet(12253): {sigup} performing signature update check... Dec 26 03:54:16 root maldet(12253): {sigup} local signature set is version 202212221231785 Dec 26 03:54:17 root maldet(12253): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 26 03:54:17 root maldet(12253): {sigup} new signature set 20221225523671 available Dec 26 03:54:17 root maldet(12253): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 26 03:54:17 root maldet(12253): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Dec 26 03:54:17 root maldet(12253): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Dec 26 03:54:17 root maldet(12253): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 26 03:54:17 root maldet(12253): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Dec 26 03:54:18 root maldet(12253): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Dec 26 03:54:18 root maldet(12253): {sigup} verified md5sum of maldet-sigpack.tgz Dec 26 03:54:18 root maldet(12253): {sigup} unpacked and installed maldet-sigpack.tgz Dec 26 03:54:18 root maldet(12253): {sigup} verified md5sum of maldet-clean.tgz Dec 26 03:54:18 root maldet(12253): {sigup} unpacked and installed maldet-clean.tgz Dec 26 03:54:18 root maldet(12253): {sigup} signature set update completed Dec 26 03:54:18 root maldet(12253): {sigup} 17367 signatures (14530 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 26 03:54:18 root maldet(12537): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 26 03:54:18 root maldet(12537): {scan} signatures loaded: 17367 (14530 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 26 03:54:18 root maldet(12537): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 26 03:54:18 root maldet(12537): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 26 03:54:18 root maldet(12537): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 26 03:54:25 root maldet(12537): {scan} file list completed in 7s, found 115 files... Dec 26 03:54:25 root maldet(12537): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 26 03:54:25 root maldet(12537): {scan} scan of (115 files) in progress... Dec 26 03:54:40 root maldet(12537): {scan} scan completed on : files 115, malware hits 0, cleaned hits 0, time 22s Dec 26 03:54:40 root maldet(12537): {scan} scan report saved, to view run: maldet --report 221226-0354.12537 Dec 27 03:17:35 root maldet(9725): {update} checking for available updates... Dec 27 03:17:35 root maldet(9725): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 27 03:17:35 root maldet(9725): {update} hashing install files and checking against server... Dec 27 03:17:35 root maldet(9725): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 27 03:17:35 root maldet(9725): {update} latest version already installed. Dec 27 03:17:36 root maldet(9865): {sigup} performing signature update check... Dec 27 03:17:36 root maldet(9865): {sigup} local signature set is version 20221225523671 Dec 27 03:17:36 root maldet(9865): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 27 03:17:36 root maldet(9865): {sigup} latest signature set already installed Dec 27 03:17:36 root maldet(9979): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 27 03:17:36 root maldet(9979): {scan} signatures loaded: 17367 (14530 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 27 03:17:36 root maldet(9979): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 27 03:17:36 root maldet(9979): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 27 03:17:36 root maldet(9979): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 27 03:17:43 root maldet(9979): {scan} file list completed in 7s, found 2908 files... Dec 27 03:17:43 root maldet(9979): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 27 03:17:43 root maldet(9979): {scan} scan of (2908 files) in progress... Dec 27 03:18:51 root maldet(9979): {scan} scan completed on : files 2908, malware hits 0, cleaned hits 0, time 75s Dec 27 03:18:51 root maldet(9979): {scan} scan report saved, to view run: maldet --report 221227-0317.9979 Dec 28 03:31:56 root maldet(14036): {update} checking for available updates... Dec 28 03:31:56 root maldet(14036): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 28 03:31:56 root maldet(14036): {update} hashing install files and checking against server... Dec 28 03:31:57 root maldet(14036): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 28 03:31:57 root maldet(14036): {update} latest version already installed. Dec 28 03:31:57 root maldet(14181): {sigup} performing signature update check... Dec 28 03:31:57 root maldet(14181): {sigup} local signature set is version 20221225523671 Dec 28 03:31:57 root maldet(14181): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 28 03:31:57 root maldet(14181): {sigup} latest signature set already installed Dec 28 03:31:59 root maldet(14305): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 28 03:32:00 root maldet(14305): {scan} signatures loaded: 17367 (14530 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 28 03:32:00 root maldet(14305): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 28 03:32:00 root maldet(14305): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 28 03:32:00 root maldet(14305): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 28 03:32:07 root maldet(14305): {scan} file list completed in 7s, found 5630 files... Dec 28 03:32:07 root maldet(14305): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 28 03:32:07 root maldet(14305): {scan} scan of (5630 files) in progress... Dec 28 03:33:40 root maldet(14305): {scan} scan completed on : files 5630, malware hits 0, cleaned hits 0, time 101s Dec 28 03:33:40 root maldet(14305): {scan} scan report saved, to view run: maldet --report 221228-0331.14305 Dec 29 03:47:53 root maldet(31297): {update} checking for available updates... Dec 29 03:47:54 root maldet(31297): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 29 03:47:54 root maldet(31297): {update} hashing install files and checking against server... Dec 29 03:47:54 root maldet(31297): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 29 03:47:54 root maldet(31297): {update} latest version already installed. Dec 29 03:47:54 root maldet(31525): {sigup} performing signature update check... Dec 29 03:47:54 root maldet(31525): {sigup} local signature set is version 20221225523671 Dec 29 03:47:55 root maldet(31525): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 29 03:47:55 root maldet(31525): {sigup} latest signature set already installed Dec 29 03:47:55 root maldet(31699): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 29 03:47:58 root maldet(31699): {scan} signatures loaded: 17367 (14530 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 29 03:47:58 root maldet(31699): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 29 03:47:58 root maldet(31699): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 29 03:47:58 root maldet(31699): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 29 03:48:11 root maldet(31699): {scan} file list completed in 13s, found 3702 files... Dec 29 03:48:11 root maldet(31699): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 29 03:48:11 root maldet(31699): {scan} scan of (3702 files) in progress... Dec 29 03:52:21 root maldet(31699): {scan} scan completed on : files 3702, malware hits 0, cleaned hits 0, time 266s Dec 29 03:52:21 root maldet(31699): {scan} scan report saved, to view run: maldet --report 221229-0347.31699 Dec 30 03:48:06 root maldet(7185): {update} checking for available updates... Dec 30 03:48:06 root maldet(7185): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 30 03:48:06 root maldet(7185): {update} hashing install files and checking against server... Dec 30 03:48:06 root maldet(7185): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 30 03:48:06 root maldet(7185): {update} latest version already installed. Dec 30 03:48:06 root maldet(7331): {sigup} performing signature update check... Dec 30 03:48:06 root maldet(7331): {sigup} local signature set is version 20221225523671 Dec 30 03:48:07 root maldet(7331): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 30 03:48:07 root maldet(7331): {sigup} latest signature set already installed Dec 30 03:48:07 root maldet(7451): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 30 03:48:07 root maldet(7451): {scan} signatures loaded: 17367 (14530 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 30 03:48:07 root maldet(7451): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 30 03:48:07 root maldet(7451): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 30 03:48:07 root maldet(7451): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 30 03:48:14 root maldet(7451): {scan} file list completed in 7s, found 5891 files... Dec 30 03:48:14 root maldet(7451): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 30 03:48:14 root maldet(7451): {scan} scan of (5891 files) in progress... Dec 30 03:49:27 root maldet(7451): {scan} scan completed on : files 5891, malware hits 0, cleaned hits 0, time 80s Dec 30 03:49:27 root maldet(7451): {scan} scan report saved, to view run: maldet --report 221230-0348.7451 Dec 31 03:25:44 root maldet(22858): {update} checking for available updates... Dec 31 03:25:44 root maldet(22858): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Dec 31 03:25:44 root maldet(22858): {update} hashing install files and checking against server... Dec 31 03:25:45 root maldet(22858): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Dec 31 03:25:45 root maldet(22858): {update} latest version already installed. Dec 31 03:25:45 root maldet(23006): {sigup} performing signature update check... Dec 31 03:25:45 root maldet(23006): {sigup} local signature set is version 20221225523671 Dec 31 03:25:45 root maldet(23006): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Dec 31 03:25:45 root maldet(23006): {sigup} latest signature set already installed Dec 31 03:25:45 root maldet(23126): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Dec 31 03:25:45 root maldet(23126): {scan} signatures loaded: 17367 (14530 MD5 | 2054 HEX | 783 YARA | 0 USER) Dec 31 03:25:45 root maldet(23126): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Dec 31 03:25:45 root maldet(23126): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Dec 31 03:25:45 root maldet(23126): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Dec 31 03:25:52 root maldet(23126): {scan} file list completed in 7s, found 85 files... Dec 31 03:25:52 root maldet(23126): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Dec 31 03:25:52 root maldet(23126): {scan} scan of (85 files) in progress... Dec 31 03:26:05 root maldet(23126): {scan} scan completed on : files 85, malware hits 0, cleaned hits 0, time 20s Dec 31 03:26:05 root maldet(23126): {scan} scan report saved, to view run: maldet --report 221231-0325.23126 Jan 01 03:27:33 root maldet(6876): {update} checking for available updates... Jan 01 03:27:34 root maldet(6876): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 01 03:27:34 root maldet(6876): {update} hashing install files and checking against server... Jan 01 03:27:34 root maldet(6876): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 01 03:27:34 root maldet(6876): {update} latest version already installed. Jan 01 03:27:34 root maldet(7022): {sigup} performing signature update check... Jan 01 03:27:34 root maldet(7022): {sigup} local signature set is version 20221225523671 Jan 01 03:27:34 root maldet(7022): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 01 03:27:34 root maldet(7022): {sigup} new signature set 20221231483118 available Jan 01 03:27:34 root maldet(7022): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 01 03:27:34 root maldet(7022): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 01 03:27:35 root maldet(7022): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 01 03:27:35 root maldet(7022): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 01 03:27:35 root maldet(7022): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 01 03:27:35 root maldet(7022): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 01 03:27:35 root maldet(7022): {sigup} verified md5sum of maldet-sigpack.tgz Jan 01 03:27:35 root maldet(7022): {sigup} unpacked and installed maldet-sigpack.tgz Jan 01 03:27:35 root maldet(7022): {sigup} verified md5sum of maldet-clean.tgz Jan 01 03:27:35 root maldet(7022): {sigup} unpacked and installed maldet-clean.tgz Jan 01 03:27:35 root maldet(7022): {sigup} signature set update completed Jan 01 03:27:35 root maldet(7022): {sigup} 17367 signatures (14530 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 01 03:27:35 root maldet(7302): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 01 03:27:36 root maldet(7302): {scan} signatures loaded: 17367 (14530 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 01 03:27:36 root maldet(7302): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 01 03:27:36 root maldet(7302): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 01 03:27:36 root maldet(7302): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 01 03:27:42 root maldet(7302): {scan} file list completed in 6s, found 95 files... Jan 01 03:27:42 root maldet(7302): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 01 03:27:42 root maldet(7302): {scan} scan of (95 files) in progress... Jan 01 03:27:57 root maldet(7302): {scan} scan completed on : files 95, malware hits 0, cleaned hits 0, time 22s Jan 01 03:27:57 root maldet(7302): {scan} scan report saved, to view run: maldet --report 230101-0327.7302 Jan 02 03:30:02 root maldet(10118): {update} checking for available updates... Jan 02 03:30:03 root maldet(10118): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 02 03:30:03 root maldet(10118): {update} hashing install files and checking against server... Jan 02 03:30:03 root maldet(10118): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 02 03:30:03 root maldet(10118): {update} latest version already installed. Jan 02 03:30:03 root maldet(10298): {sigup} performing signature update check... Jan 02 03:30:03 root maldet(10298): {sigup} local signature set is version 20221231483118 Jan 02 03:30:03 root maldet(10298): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 02 03:30:03 root maldet(10298): {sigup} new signature set 20230101478476 available Jan 02 03:30:03 root maldet(10298): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 02 03:30:03 root maldet(10298): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 02 03:30:04 root maldet(10298): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 02 03:30:04 root maldet(10298): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 02 03:30:04 root maldet(10298): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 02 03:30:04 root maldet(10298): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 02 03:30:04 root maldet(10298): {sigup} verified md5sum of maldet-sigpack.tgz Jan 02 03:30:04 root maldet(10298): {sigup} unpacked and installed maldet-sigpack.tgz Jan 02 03:30:05 root maldet(10298): {sigup} verified md5sum of maldet-clean.tgz Jan 02 03:30:05 root maldet(10298): {sigup} unpacked and installed maldet-clean.tgz Jan 02 03:30:05 root maldet(10298): {sigup} signature set update completed Jan 02 03:30:05 root maldet(10298): {sigup} 17367 signatures (14530 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 02 03:30:05 root maldet(10559): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 02 03:30:05 root maldet(10559): {scan} signatures loaded: 17367 (14530 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 02 03:30:05 root maldet(10559): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 02 03:30:05 root maldet(10559): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 02 03:30:05 root maldet(10559): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 02 03:30:12 root maldet(10559): {scan} file list completed in 7s, found 1029 files... Jan 02 03:30:12 root maldet(10559): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 02 03:30:12 root maldet(10559): {scan} scan of (1029 files) in progress... Jan 02 03:30:40 root maldet(10559): {hit} malware hit {CAV}Win.Trojan.Hide-1 found for /home/growthpharma/public_html/Master@Growth/page/230101213714_proimage.jpg Jan 02 03:30:40 root maldet(10559): {quar} malware quarantined from '/home/growthpharma/public_html/Master@Growth/page/230101213714_proimage.jpg' to '/usr/local/maldetect/quarantine/230101213714_proimage.jpg.235281504' Jan 02 03:30:40 root maldet(10559): {scan} scan completed on : files 1029, malware hits 1, cleaned hits 0, time 35s Jan 02 03:30:40 root maldet(10559): {scan} scan report saved, to view run: maldet --report 230102-0330.10559 Jan 03 03:37:44 root maldet(5603): {update} checking for available updates... Jan 03 03:37:44 root maldet(5603): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 03 03:37:44 root maldet(5603): {update} hashing install files and checking against server... Jan 03 03:37:46 root maldet(5603): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 03 03:37:46 root maldet(5603): {update} latest version already installed. Jan 03 03:37:46 root maldet(5755): {sigup} performing signature update check... Jan 03 03:37:46 root maldet(5755): {sigup} local signature set is version 20230101478476 Jan 03 03:37:47 root maldet(5755): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 03 03:37:47 root maldet(5755): {sigup} latest signature set already installed Jan 03 03:37:47 root maldet(5892): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 03 03:37:48 root maldet(5892): {scan} signatures loaded: 17367 (14530 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 03 03:37:48 root maldet(5892): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 03 03:37:48 root maldet(5892): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 03 03:37:48 root maldet(5892): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 03 03:37:54 root maldet(5892): {scan} file list completed in 6s, found 1721 files... Jan 03 03:37:54 root maldet(5892): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 03 03:37:54 root maldet(5892): {scan} scan of (1721 files) in progress... Jan 03 03:39:36 root maldet(5892): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Jan 03 03:39:36 root maldet(5892): {scan} scan completed on : files 1721, malware hits 0, cleaned hits 0, time 109s Jan 03 03:39:36 root maldet(5892): {scan} scan report saved, to view run: maldet --report 230103-0337.5892 Jan 04 03:44:27 root maldet(8513): {update} checking for available updates... Jan 04 03:44:27 root maldet(8513): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 04 03:44:27 root maldet(8513): {update} hashing install files and checking against server... Jan 04 03:44:28 root maldet(8513): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 04 03:44:28 root maldet(8513): {update} latest version already installed. Jan 04 03:44:28 root maldet(8654): {sigup} performing signature update check... Jan 04 03:44:28 root maldet(8654): {sigup} local signature set is version 20230101478476 Jan 04 03:44:29 root maldet(8654): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 04 03:44:29 root maldet(8654): {sigup} latest signature set already installed Jan 04 03:44:29 root maldet(8778): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 04 03:44:29 root maldet(8778): {scan} signatures loaded: 17367 (14530 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 04 03:44:29 root maldet(8778): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 04 03:44:29 root maldet(8778): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 04 03:44:29 root maldet(8778): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 04 03:44:36 root maldet(8778): {scan} file list completed in 7s, found 1845 files... Jan 04 03:44:36 root maldet(8778): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 04 03:44:36 root maldet(8778): {scan} scan of (1845 files) in progress... Jan 04 03:46:08 root maldet(8778): {scan} scan completed on : files 1845, malware hits 0, cleaned hits 0, time 99s Jan 04 03:46:08 root maldet(8778): {scan} scan report saved, to view run: maldet --report 230104-0344.8778 Jan 05 03:22:12 root maldet(30391): {update} checking for available updates... Jan 05 03:22:12 root maldet(30391): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 05 03:22:12 root maldet(30391): {update} hashing install files and checking against server... Jan 05 03:22:12 root maldet(30391): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 05 03:22:12 root maldet(30391): {update} latest version already installed. Jan 05 03:22:12 root maldet(30535): {sigup} performing signature update check... Jan 05 03:22:12 root maldet(30535): {sigup} local signature set is version 20230101478476 Jan 05 03:22:13 root maldet(30535): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 05 03:22:13 root maldet(30535): {sigup} new signature set 20230104504484 available Jan 05 03:22:13 root maldet(30535): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 05 03:22:13 root maldet(30535): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 05 03:22:13 root maldet(30535): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 05 03:22:13 root maldet(30535): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 05 03:22:13 root maldet(30535): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 05 03:22:14 root maldet(30535): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 05 03:22:14 root maldet(30535): {sigup} verified md5sum of maldet-sigpack.tgz Jan 05 03:22:14 root maldet(30535): {sigup} unpacked and installed maldet-sigpack.tgz Jan 05 03:22:14 root maldet(30535): {sigup} verified md5sum of maldet-clean.tgz Jan 05 03:22:14 root maldet(30535): {sigup} unpacked and installed maldet-clean.tgz Jan 05 03:22:14 root maldet(30535): {sigup} signature set update completed Jan 05 03:22:14 root maldet(30535): {sigup} 17368 signatures (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 05 03:22:14 root maldet(30799): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 05 03:22:14 root maldet(30799): {scan} signatures loaded: 17368 (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 05 03:22:14 root maldet(30799): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 05 03:22:14 root maldet(30799): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 05 03:22:14 root maldet(30799): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 05 03:22:21 root maldet(30799): {scan} file list completed in 7s, found 330 files... Jan 05 03:22:21 root maldet(30799): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 05 03:22:21 root maldet(30799): {scan} scan of (330 files) in progress... Jan 05 03:22:49 root maldet(30799): {scan} scan completed on : files 330, malware hits 0, cleaned hits 0, time 35s Jan 05 03:22:49 root maldet(30799): {scan} scan report saved, to view run: maldet --report 230105-0322.30799 Jan 06 03:34:49 root maldet(16972): {update} checking for available updates... Jan 06 03:34:51 root maldet(16972): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 06 03:34:51 root maldet(16972): {update} hashing install files and checking against server... Jan 06 03:34:51 root maldet(16972): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 06 03:34:51 root maldet(16972): {update} latest version already installed. Jan 06 03:34:51 root maldet(17138): {sigup} performing signature update check... Jan 06 03:34:51 root maldet(17138): {sigup} local signature set is version 20230104504484 Jan 06 03:34:51 root maldet(17138): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 06 03:34:51 root maldet(17138): {sigup} latest signature set already installed Jan 06 03:34:52 root maldet(17254): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 06 03:34:52 root maldet(17254): {scan} signatures loaded: 17368 (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 06 03:34:52 root maldet(17254): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 06 03:34:52 root maldet(17254): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 06 03:34:52 root maldet(17254): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 06 03:34:59 root maldet(17254): {scan} file list completed in 7s, found 159 files... Jan 06 03:34:59 root maldet(17254): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 06 03:34:59 root maldet(17254): {scan} scan of (159 files) in progress... Jan 06 03:35:15 root maldet(17254): {scan} scan completed on : files 159, malware hits 0, cleaned hits 0, time 23s Jan 06 03:35:15 root maldet(17254): {scan} scan report saved, to view run: maldet --report 230106-0334.17254 Jan 07 03:41:47 root maldet(6557): {update} checking for available updates... Jan 07 03:41:48 root maldet(6557): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 07 03:41:48 root maldet(6557): {update} hashing install files and checking against server... Jan 07 03:41:48 root maldet(6557): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 07 03:41:48 root maldet(6557): {update} latest version already installed. Jan 07 03:41:48 root maldet(6694): {sigup} performing signature update check... Jan 07 03:41:48 root maldet(6694): {sigup} local signature set is version 20230104504484 Jan 07 03:41:48 root maldet(6694): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 07 03:41:48 root maldet(6694): {sigup} latest signature set already installed Jan 07 03:41:48 root maldet(6810): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 07 03:41:48 root maldet(6810): {scan} signatures loaded: 17368 (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 07 03:41:48 root maldet(6810): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 07 03:41:48 root maldet(6810): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 07 03:41:48 root maldet(6810): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 07 03:41:55 root maldet(6810): {scan} file list completed in 6s, found 6996 files... Jan 07 03:41:55 root maldet(6810): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 07 03:41:55 root maldet(6810): {scan} scan of (6996 files) in progress... Jan 07 03:43:08 root maldet(6810): {scan} scan completed on : files 6996, malware hits 0, cleaned hits 0, time 80s Jan 07 03:43:08 root maldet(6810): {scan} scan report saved, to view run: maldet --report 230107-0341.6810 Jan 08 03:41:21 root maldet(32249): {update} checking for available updates... Jan 08 03:41:21 root maldet(32249): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 08 03:41:21 root maldet(32249): {update} hashing install files and checking against server... Jan 08 03:41:21 root maldet(32249): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 08 03:41:21 root maldet(32249): {update} latest version already installed. Jan 08 03:41:21 root maldet(32391): {sigup} performing signature update check... Jan 08 03:41:21 root maldet(32391): {sigup} local signature set is version 20230104504484 Jan 08 03:41:22 root maldet(32391): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 08 03:41:22 root maldet(32391): {sigup} new signature set 20230107515558 available Jan 08 03:41:22 root maldet(32391): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 08 03:41:22 root maldet(32391): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 08 03:41:22 root maldet(32391): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 08 03:41:22 root maldet(32391): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 08 03:41:22 root maldet(32391): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 08 03:41:23 root maldet(32391): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 08 03:41:23 root maldet(32391): {sigup} verified md5sum of maldet-sigpack.tgz Jan 08 03:41:23 root maldet(32391): {sigup} unpacked and installed maldet-sigpack.tgz Jan 08 03:41:23 root maldet(32391): {sigup} verified md5sum of maldet-clean.tgz Jan 08 03:41:23 root maldet(32391): {sigup} unpacked and installed maldet-clean.tgz Jan 08 03:41:23 root maldet(32391): {sigup} signature set update completed Jan 08 03:41:23 root maldet(32391): {sigup} 17368 signatures (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 08 03:41:23 root maldet(32690): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 08 03:41:23 root maldet(32690): {scan} signatures loaded: 17368 (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 08 03:41:23 root maldet(32690): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 08 03:41:23 root maldet(32690): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 08 03:41:23 root maldet(32690): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 08 03:41:29 root maldet(32690): {scan} file list completed in 6s, found 111 files... Jan 08 03:41:29 root maldet(32690): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 08 03:41:29 root maldet(32690): {scan} scan of (111 files) in progress... Jan 08 03:41:45 root maldet(32690): {scan} scan completed on : files 111, malware hits 0, cleaned hits 0, time 22s Jan 08 03:41:45 root maldet(32690): {scan} scan report saved, to view run: maldet --report 230108-0341.32690 Jan 09 03:16:01 root maldet(26770): {update} checking for available updates... Jan 09 03:16:02 root maldet(26770): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 09 03:16:02 root maldet(26770): {update} hashing install files and checking against server... Jan 09 03:16:02 root maldet(26770): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 09 03:16:02 root maldet(26770): {update} latest version already installed. Jan 09 03:16:02 root maldet(26908): {sigup} performing signature update check... Jan 09 03:16:02 root maldet(26908): {sigup} local signature set is version 20230107515558 Jan 09 03:16:02 root maldet(26908): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 09 03:16:02 root maldet(26908): {sigup} latest signature set already installed Jan 09 03:16:03 root maldet(27021): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 09 03:16:03 root maldet(27021): {scan} signatures loaded: 17368 (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 09 03:16:03 root maldet(27021): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 09 03:16:03 root maldet(27021): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 09 03:16:03 root maldet(27021): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 09 03:16:09 root maldet(27021): {scan} file list completed in 6s, found 101 files... Jan 09 03:16:09 root maldet(27021): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 09 03:16:09 root maldet(27021): {scan} scan of (101 files) in progress... Jan 09 03:16:23 root maldet(27021): {scan} scan completed on : files 101, malware hits 0, cleaned hits 0, time 20s Jan 09 03:16:23 root maldet(27021): {scan} scan report saved, to view run: maldet --report 230109-0316.27021 Jan 10 03:25:07 root maldet(28411): {update} checking for available updates... Jan 10 03:25:07 root maldet(28411): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 10 03:25:07 root maldet(28411): {update} hashing install files and checking against server... Jan 10 03:25:08 root maldet(28411): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 10 03:25:08 root maldet(28411): {update} latest version already installed. Jan 10 03:25:08 root maldet(28559): {sigup} performing signature update check... Jan 10 03:25:08 root maldet(28559): {sigup} local signature set is version 20230107515558 Jan 10 03:25:08 root maldet(28559): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 10 03:25:08 root maldet(28559): {sigup} latest signature set already installed Jan 10 03:25:08 root maldet(28676): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 10 03:25:10 root maldet(28676): {scan} signatures loaded: 17368 (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 10 03:25:10 root maldet(28676): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 10 03:25:10 root maldet(28676): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 10 03:25:10 root maldet(28676): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 10 03:52:50 root maldet(28676): {scan} file list completed in 1659s, found 1352 files... Jan 10 03:52:50 root maldet(28676): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 10 03:52:50 root maldet(28676): {scan} scan of (1352 files) in progress... Jan 10 03:54:37 root maldet(28676): {scan} scan completed on : files 1352, malware hits 0, cleaned hits 0, time 1769s Jan 10 03:54:37 root maldet(28676): {scan} scan report saved, to view run: maldet --report 230110-0325.28676 Jan 11 03:36:43 root maldet(15898): {update} checking for available updates... Jan 11 03:36:43 root maldet(15898): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 11 03:36:43 root maldet(15898): {update} hashing install files and checking against server... Jan 11 03:36:43 root maldet(15898): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 11 03:36:43 root maldet(15898): {update} latest version already installed. Jan 11 03:36:44 root maldet(16036): {sigup} performing signature update check... Jan 11 03:36:44 root maldet(16036): {sigup} local signature set is version 20230107515558 Jan 11 03:36:44 root maldet(16036): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 11 03:36:44 root maldet(16036): {sigup} new signature set 202301101195576 available Jan 11 03:36:44 root maldet(16036): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 11 03:36:44 root maldet(16036): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 11 03:36:44 root maldet(16036): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 11 03:36:44 root maldet(16036): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 11 03:36:45 root maldet(16036): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 11 03:36:45 root maldet(16036): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 11 03:36:45 root maldet(16036): {sigup} verified md5sum of maldet-sigpack.tgz Jan 11 03:36:46 root maldet(16036): {sigup} unpacked and installed maldet-sigpack.tgz Jan 11 03:36:46 root maldet(16036): {sigup} verified md5sum of maldet-clean.tgz Jan 11 03:36:46 root maldet(16036): {sigup} unpacked and installed maldet-clean.tgz Jan 11 03:36:46 root maldet(16036): {sigup} signature set update completed Jan 11 03:36:46 root maldet(16036): {sigup} 17368 signatures (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 11 03:36:46 root maldet(16293): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 11 03:36:47 root maldet(16293): {scan} signatures loaded: 17368 (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 11 03:36:47 root maldet(16293): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 11 03:36:47 root maldet(16293): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 11 03:36:47 root maldet(16293): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 11 03:36:53 root maldet(16293): {scan} file list completed in 6s, found 6715 files... Jan 11 03:36:53 root maldet(16293): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 11 03:36:53 root maldet(16293): {scan} scan of (6715 files) in progress... Jan 11 03:40:16 root maldet(16293): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Jan 11 03:40:16 root maldet(16293): {scan} scan completed on : files 6715, malware hits 0, cleaned hits 0, time 210s Jan 11 03:40:16 root maldet(16293): {scan} scan report saved, to view run: maldet --report 230111-0336.16293 Jan 12 03:29:22 root maldet(10090): {update} checking for available updates... Jan 12 03:29:23 root maldet(10090): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 12 03:29:23 root maldet(10090): {update} hashing install files and checking against server... Jan 12 03:29:23 root maldet(10090): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 12 03:29:23 root maldet(10090): {update} latest version already installed. Jan 12 03:29:23 root maldet(10246): {sigup} performing signature update check... Jan 12 03:29:23 root maldet(10246): {sigup} local signature set is version 202301101195576 Jan 12 03:29:23 root maldet(10246): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 12 03:29:23 root maldet(10246): {sigup} latest signature set already installed Jan 12 03:29:24 root maldet(10414): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 12 03:29:24 root maldet(10414): {scan} signatures loaded: 17368 (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 12 03:29:24 root maldet(10414): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 12 03:29:24 root maldet(10414): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 12 03:29:24 root maldet(10414): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 12 03:29:30 root maldet(10414): {scan} file list completed in 6s, found 7714 files... Jan 12 03:29:30 root maldet(10414): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 12 03:29:30 root maldet(10414): {scan} scan of (7714 files) in progress... Jan 12 03:31:37 root maldet(10414): {scan} scan completed on : files 7714, malware hits 0, cleaned hits 0, time 133s Jan 12 03:31:37 root maldet(10414): {scan} scan report saved, to view run: maldet --report 230112-0329.10414 Jan 13 03:31:11 root maldet(25892): {update} checking for available updates... Jan 13 03:31:12 root maldet(25892): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 13 03:31:12 root maldet(25892): {update} hashing install files and checking against server... Jan 13 03:31:12 root maldet(25892): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 13 03:31:12 root maldet(25892): {update} latest version already installed. Jan 13 03:31:12 root maldet(26041): {sigup} performing signature update check... Jan 13 03:31:12 root maldet(26041): {sigup} local signature set is version 202301101195576 Jan 13 03:31:12 root maldet(26041): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 13 03:31:12 root maldet(26041): {sigup} latest signature set already installed Jan 13 03:31:13 root maldet(26165): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 13 03:31:13 root maldet(26165): {scan} signatures loaded: 17368 (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 13 03:31:13 root maldet(26165): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 13 03:31:13 root maldet(26165): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 13 03:31:13 root maldet(26165): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cabcc/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/creditfirst/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vaidikgauvigyan/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 13 03:31:19 root maldet(26165): {scan} file list completed in 6s, found 365 files... Jan 13 03:31:19 root maldet(26165): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 13 03:31:19 root maldet(26165): {scan} scan of (365 files) in progress... Jan 13 03:31:40 root maldet(26165): {scan} scan completed on : files 365, malware hits 0, cleaned hits 0, time 27s Jan 13 03:31:40 root maldet(26165): {scan} scan report saved, to view run: maldet --report 230113-0331.26165 Jan 14 03:24:21 root maldet(27158): {update} checking for available updates... Jan 14 03:24:22 root maldet(27158): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 14 03:24:22 root maldet(27158): {update} hashing install files and checking against server... Jan 14 03:24:22 root maldet(27158): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 14 03:24:22 root maldet(27158): {update} latest version already installed. Jan 14 03:24:22 root maldet(27302): {sigup} performing signature update check... Jan 14 03:24:22 root maldet(27302): {sigup} local signature set is version 202301101195576 Jan 14 03:24:23 root maldet(27302): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 14 03:24:23 root maldet(27302): {sigup} new signature set 20230113483144 available Jan 14 03:24:23 root maldet(27302): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 14 03:24:23 root maldet(27302): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 14 03:24:23 root maldet(27302): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 14 03:24:23 root maldet(27302): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 14 03:24:24 root maldet(27302): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 14 03:24:24 root maldet(27302): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 14 03:24:24 root maldet(27302): {sigup} verified md5sum of maldet-sigpack.tgz Jan 14 03:24:24 root maldet(27302): {sigup} unpacked and installed maldet-sigpack.tgz Jan 14 03:24:24 root maldet(27302): {sigup} verified md5sum of maldet-clean.tgz Jan 14 03:24:24 root maldet(27302): {sigup} unpacked and installed maldet-clean.tgz Jan 14 03:24:24 root maldet(27302): {sigup} signature set update completed Jan 14 03:24:24 root maldet(27302): {sigup} 17368 signatures (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 14 03:24:24 root maldet(27552): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 14 03:24:24 root maldet(27552): {scan} signatures loaded: 17368 (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 14 03:24:24 root maldet(27552): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 14 03:24:24 root maldet(27552): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 14 03:24:24 root maldet(27552): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 14 03:24:30 root maldet(27552): {scan} file list completed in 6s, found 88 files... Jan 14 03:24:30 root maldet(27552): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 14 03:24:30 root maldet(27552): {scan} scan of (88 files) in progress... Jan 14 03:24:46 root maldet(27552): {scan} scan completed on : files 88, malware hits 0, cleaned hits 0, time 22s Jan 14 03:24:46 root maldet(27552): {scan} scan report saved, to view run: maldet --report 230114-0324.27552 Jan 15 03:44:30 root maldet(16566): {update} checking for available updates... Jan 15 03:44:31 root maldet(16566): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 15 03:44:31 root maldet(16566): {update} hashing install files and checking against server... Jan 15 03:44:31 root maldet(16566): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 15 03:44:31 root maldet(16566): {update} latest version already installed. Jan 15 03:44:31 root maldet(16719): {sigup} performing signature update check... Jan 15 03:44:31 root maldet(16719): {sigup} local signature set is version 20230113483144 Jan 15 03:44:32 root maldet(16719): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 15 03:44:32 root maldet(16719): {sigup} latest signature set already installed Jan 15 03:44:32 root maldet(16854): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 15 03:44:34 root maldet(16854): {scan} signatures loaded: 17368 (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 15 03:44:34 root maldet(16854): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 15 03:44:34 root maldet(16854): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 15 03:44:34 root maldet(16854): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 15 04:00:11 root maldet(16854): {scan} file list completed in 937s, found 79 files... Jan 15 04:00:11 root maldet(16854): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 15 04:00:11 root maldet(16854): {scan} scan of (79 files) in progress... Jan 15 04:01:31 root maldet(16854): {hit} malware hit {YARA}php_in_image found for /home/aadisol/public_html/aca/images/documents/5.jpg Jan 15 04:01:31 root maldet(16854): {quar} malware quarantined from '/home/aadisol/public_html/aca/images/documents/5.jpg' to '/usr/local/maldetect/quarantine/5.jpg.1839111598' Jan 15 04:01:31 root maldet(16854): {hit} malware hit {YARA}php_in_image found for /home/aadisol/public_html/aca/images/documents/5.pjpg Jan 15 04:01:31 root maldet(16854): {quar} malware quarantined from '/home/aadisol/public_html/aca/images/documents/5.pjpg' to '/usr/local/maldetect/quarantine/5.pjpg.3162819661' Jan 15 04:01:31 root maldet(16854): {hit} malware hit {YARA}php_in_image found for /home/aadisol/public_html/aca/images/documents/5.phtml Jan 15 04:01:31 root maldet(16854): {quar} malware quarantined from '/home/aadisol/public_html/aca/images/documents/5.phtml' to '/usr/local/maldetect/quarantine/5.phtml.186708883' Jan 15 04:01:31 root maldet(16854): {hit} malware hit {YARA}php_in_image found for /home/aadisol/public_html/aca/images/documents/5.test Jan 15 04:01:31 root maldet(16854): {quar} malware quarantined from '/home/aadisol/public_html/aca/images/documents/5.test' to '/usr/local/maldetect/quarantine/5.test.16028317' Jan 15 04:01:31 root maldet(16854): {hit} malware hit {YARA}php_in_image found for /home/aadisol/public_html/aca/images/documents/5. Jan 15 04:01:31 root maldet(16854): {quar} malware quarantined from '/home/aadisol/public_html/aca/images/documents/5.' to '/usr/local/maldetect/quarantine/5..261717689' Jan 15 04:01:31 root maldet(16854): {hit} malware hit {YARA}php_in_image found for /home/aadisol/public_html/aca/images/documents/5.php?>jpg Jan 15 04:01:31 root maldet(16854): {quar} malware quarantined from '/home/aadisol/public_html/aca/images/documents/5.php?>jpg' to '/usr/local/maldetect/quarantine/5.php?>jpg.506621770' Jan 15 04:01:31 root maldet(16854): {hit} malware hit {YARA}php_in_image found for /home/aadisol/public_html/aca/images/documents/5.php?> Jan 15 04:01:31 root maldet(16854): {quar} malware quarantined from '/home/aadisol/public_html/aca/images/documents/5.php?>' to '/usr/local/maldetect/quarantine/5.php?>.198919104' Jan 15 04:01:31 root maldet(16854): {hit} malware hit {YARA}php_in_image found for /home/aadisol/public_html/aca/images/documents/5.php? Jan 15 04:01:31 root maldet(16854): {quar} malware quarantined from '/home/aadisol/public_html/aca/images/documents/5.php?' to '/usr/local/maldetect/quarantine/5.php?.206269203' Jan 15 04:01:31 root maldet(16854): {hit} malware hit {YARA}php_in_image found for /home/aadisol/public_html/aca/images/documents/5.php Jan 15 04:01:31 root maldet(16854): {quar} malware quarantined from '/home/aadisol/public_html/aca/images/documents/5.php' to '/usr/local/maldetect/quarantine/5.php.1587521501' Jan 15 04:01:31 root maldet(16854): {hit} malware hit {YARA}php_in_image found for /home/aadisol/public_html/aca/images/documents/5.pHp Jan 15 04:01:31 root maldet(16854): {quar} malware quarantined from '/home/aadisol/public_html/aca/images/documents/5.pHp' to '/usr/local/maldetect/quarantine/5.pHp.473931745' Jan 15 04:01:31 root maldet(16854): {hit} malware hit {YARA}php_in_image found for /home/aadisol/public_html/aca/images/documents/5.Php Jan 15 04:01:31 root maldet(16854): {quar} malware quarantined from '/home/aadisol/public_html/aca/images/documents/5.Php' to '/usr/local/maldetect/quarantine/5.Php.174284009' Jan 15 04:01:31 root maldet(16854): {hit} malware hit {YARA}php_in_image found for /home/aadisol/public_html/aca/images/documents/5.Phpxxxjpg Jan 15 04:01:31 root maldet(16854): {quar} malware quarantined from '/home/aadisol/public_html/aca/images/documents/5.Phpxxxjpg' to '/usr/local/maldetect/quarantine/5.Phpxxxjpg.1789011425' Jan 15 04:01:32 root maldet(16854): {hit} malware hit {YARA}php_in_image found for /home/aadisol/public_html/aca/images/documents/5.PhP Jan 15 04:01:32 root maldet(16854): {quar} malware quarantined from '/home/aadisol/public_html/aca/images/documents/5.PhP' to '/usr/local/maldetect/quarantine/5.PhP.307429483' Jan 15 04:01:32 root maldet(16854): {hit} malware hit {YARA}php_in_image found for /home/aadisol/public_html/aca/images/documents/5.shtml Jan 15 04:01:32 root maldet(16854): {quar} malware quarantined from '/home/aadisol/public_html/aca/images/documents/5.shtml' to '/usr/local/maldetect/quarantine/5.shtml.82129090' Jan 15 04:01:32 root maldet(16854): {hit} malware hit {YARA}php_in_image found for /home/aadisol/public_html/aca/images/documents/5.ph Jan 15 04:01:32 root maldet(16854): {quar} malware quarantined from '/home/aadisol/public_html/aca/images/documents/5.ph' to '/usr/local/maldetect/quarantine/5.ph.17170835' Jan 15 04:01:32 root maldet(16854): {scan} scan completed on : files 79, malware hits 15, cleaned hits 0, time 1020s Jan 15 04:01:32 root maldet(16854): {scan} scan report saved, to view run: maldet --report 230115-0344.16854 Jan 16 03:58:01 root maldet(23118): {update} checking for available updates... Jan 16 03:58:01 root maldet(23118): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 16 03:58:01 root maldet(23118): {update} hashing install files and checking against server... Jan 16 03:58:01 root maldet(23118): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 16 03:58:01 root maldet(23118): {update} latest version already installed. Jan 16 03:58:01 root maldet(23295): {sigup} performing signature update check... Jan 16 03:58:01 root maldet(23295): {sigup} local signature set is version 20230113483144 Jan 16 03:58:02 root maldet(23295): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 16 03:58:02 root maldet(23295): {sigup} latest signature set already installed Jan 16 03:58:02 root maldet(23413): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 16 03:58:10 root maldet(23413): {scan} signatures loaded: 17368 (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 16 03:58:10 root maldet(23413): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 16 03:58:10 root maldet(23413): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 16 03:58:10 root maldet(23413): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 16 04:47:35 root maldet(23413): {scan} file list completed in 2965s, found 75 files... Jan 16 04:47:35 root maldet(23413): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 16 04:47:35 root maldet(23413): {scan} scan of (75 files) in progress... Jan 16 04:48:57 root maldet(23413): {scan} scan completed on : files 75, malware hits 0, cleaned hits 0, time 3055s Jan 16 04:48:57 root maldet(23413): {scan} scan report saved, to view run: maldet --report 230116-0358.23413 Jan 17 03:19:11 root maldet(7992): {update} checking for available updates... Jan 17 03:19:12 root maldet(7992): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 17 03:19:12 root maldet(7992): {update} hashing install files and checking against server... Jan 17 03:19:12 root maldet(7992): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 17 03:19:12 root maldet(7992): {update} latest version already installed. Jan 17 03:19:12 root maldet(8136): {sigup} performing signature update check... Jan 17 03:19:12 root maldet(8136): {sigup} local signature set is version 20230113483144 Jan 17 03:19:12 root maldet(8136): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 17 03:19:12 root maldet(8136): {sigup} new signature set 20230116473525 available Jan 17 03:19:12 root maldet(8136): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 17 03:19:13 root maldet(8136): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 17 03:19:14 root maldet(8136): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 17 03:19:14 root maldet(8136): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 17 03:19:14 root maldet(8136): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 17 03:19:14 root maldet(8136): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 17 03:19:14 root maldet(8136): {sigup} verified md5sum of maldet-sigpack.tgz Jan 17 03:19:15 root maldet(8136): {sigup} unpacked and installed maldet-sigpack.tgz Jan 17 03:19:15 root maldet(8136): {sigup} verified md5sum of maldet-clean.tgz Jan 17 03:19:15 root maldet(8136): {sigup} unpacked and installed maldet-clean.tgz Jan 17 03:19:15 root maldet(8136): {sigup} signature set update completed Jan 17 03:19:15 root maldet(8136): {sigup} 17368 signatures (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 17 03:19:15 root maldet(8398): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 17 03:19:16 root maldet(8398): {scan} signatures loaded: 17368 (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 17 03:19:16 root maldet(8398): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 17 03:19:16 root maldet(8398): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 17 03:19:16 root maldet(8398): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 17 03:19:23 root maldet(8398): {scan} file list completed in 7s, found 4279 files... Jan 17 03:20:24 root maldet(8398): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 17 03:20:24 root maldet(8398): {scan} scan of (4279 files) in progress... Jan 17 03:24:19 root maldet(8398): {scan} scan completed on : files 4279, malware hits 0, cleaned hits 0, time 304s Jan 17 03:24:19 root maldet(8398): {scan} scan report saved, to view run: maldet --report 230117-0319.8398 Jan 18 03:59:23 root maldet(13597): {update} checking for available updates... Jan 18 03:59:24 root maldet(13597): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 18 03:59:24 root maldet(13597): {update} hashing install files and checking against server... Jan 18 03:59:24 root maldet(13597): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 18 03:59:24 root maldet(13597): {update} latest version already installed. Jan 18 03:59:24 root maldet(13760): {sigup} performing signature update check... Jan 18 03:59:24 root maldet(13760): {sigup} local signature set is version 20230116473525 Jan 18 03:59:24 root maldet(13760): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 18 03:59:28 root maldet(13760): {sigup} latest signature set already installed Jan 18 03:59:28 root maldet(13894): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 18 03:59:35 root maldet(13894): {scan} signatures loaded: 17368 (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 18 03:59:35 root maldet(13894): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 18 03:59:35 root maldet(13894): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 18 03:59:35 root maldet(13894): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 18 04:28:13 root maldet(13894): {scan} file list completed in 1718s, found 88 files... Jan 18 04:28:13 root maldet(13894): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 18 04:28:13 root maldet(13894): {scan} scan of (88 files) in progress... Jan 18 04:29:21 root maldet(13894): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Jan 18 04:29:21 root maldet(13894): {scan} scan completed on : files 88, malware hits 0, cleaned hits 0, time 1793s Jan 18 04:29:21 root maldet(13894): {scan} scan report saved, to view run: maldet --report 230118-0359.13894 Jan 19 04:02:27 root maldet(20181): {update} checking for available updates... Jan 19 04:02:28 root maldet(20181): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 19 04:02:28 root maldet(20181): {update} hashing install files and checking against server... Jan 19 04:02:28 root maldet(20181): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 19 04:02:28 root maldet(20181): {update} latest version already installed. Jan 19 04:02:28 root maldet(20323): {sigup} performing signature update check... Jan 19 04:02:28 root maldet(20323): {sigup} local signature set is version 20230116473525 Jan 19 04:02:28 root maldet(20323): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 19 04:02:28 root maldet(20323): {sigup} latest signature set already installed Jan 19 04:02:29 root maldet(20434): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 19 04:02:31 root maldet(20434): {scan} signatures loaded: 17368 (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 19 04:02:31 root maldet(20434): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 19 04:02:32 root maldet(20434): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 19 04:02:32 root maldet(20434): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 19 04:36:33 root maldet(20434): {scan} file list completed in 2040s, found 85 files... Jan 19 04:36:33 root maldet(20434): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 19 04:36:33 root maldet(20434): {scan} scan of (85 files) in progress... Jan 19 04:37:34 root maldet(20434): {scan} scan completed on : files 85, malware hits 0, cleaned hits 0, time 2105s Jan 19 04:37:34 root maldet(20434): {scan} scan report saved, to view run: maldet --report 230119-0402.20434 Jan 20 03:58:21 root maldet(25647): {update} checking for available updates... Jan 20 03:58:21 root maldet(25647): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 20 03:58:21 root maldet(25647): {update} hashing install files and checking against server... Jan 20 03:58:22 root maldet(25647): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 20 03:58:22 root maldet(25647): {update} latest version already installed. Jan 20 03:58:22 root maldet(25788): {sigup} performing signature update check... Jan 20 03:58:22 root maldet(25788): {sigup} local signature set is version 20230116473525 Jan 20 03:58:22 root maldet(25788): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 20 03:58:22 root maldet(25788): {sigup} new signature set 20230119469445 available Jan 20 03:58:22 root maldet(25788): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 20 03:58:22 root maldet(25788): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 20 03:58:23 root maldet(25788): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 20 03:58:23 root maldet(25788): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 20 03:58:23 root maldet(25788): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 20 03:58:23 root maldet(25788): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 20 03:58:23 root maldet(25788): {sigup} verified md5sum of maldet-sigpack.tgz Jan 20 03:58:23 root maldet(25788): {sigup} unpacked and installed maldet-sigpack.tgz Jan 20 03:58:23 root maldet(25788): {sigup} verified md5sum of maldet-clean.tgz Jan 20 03:58:23 root maldet(25788): {sigup} unpacked and installed maldet-clean.tgz Jan 20 03:58:23 root maldet(25788): {sigup} signature set update completed Jan 20 03:58:24 root maldet(25788): {sigup} 17368 signatures (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 20 03:58:24 root maldet(26087): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 20 03:58:31 root maldet(26087): {scan} signatures loaded: 17368 (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 20 03:58:31 root maldet(26087): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 20 03:58:31 root maldet(26087): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 20 03:58:31 root maldet(26087): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 20 03:58:38 root maldet(26087): {scan} file list completed in 6s, found 2641 files... Jan 20 03:58:38 root maldet(26087): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 20 03:58:38 root maldet(26087): {scan} scan of (2641 files) in progress... Jan 20 04:03:34 root maldet(26087): {scan} scan completed on : files 2641, malware hits 0, cleaned hits 0, time 310s Jan 20 04:03:34 root maldet(26087): {scan} scan report saved, to view run: maldet --report 230120-0358.26087 Jan 21 03:40:42 root maldet(30660): {update} checking for available updates... Jan 21 03:40:43 root maldet(30660): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 21 03:40:43 root maldet(30660): {update} hashing install files and checking against server... Jan 21 03:40:43 root maldet(30660): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 21 03:40:43 root maldet(30660): {update} latest version already installed. Jan 21 03:40:43 root maldet(30801): {sigup} performing signature update check... Jan 21 03:40:43 root maldet(30801): {sigup} local signature set is version 20230119469445 Jan 21 03:40:43 root maldet(30801): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 21 03:40:43 root maldet(30801): {sigup} latest signature set already installed Jan 21 03:40:43 root maldet(30922): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 21 03:40:45 root maldet(30922): {scan} signatures loaded: 17368 (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 21 03:40:45 root maldet(30922): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 21 03:40:45 root maldet(30922): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 21 03:40:46 root maldet(30922): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 21 03:40:51 root maldet(30922): {scan} file list completed in 6s, found 362 files... Jan 21 03:40:51 root maldet(30922): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 21 03:40:51 root maldet(30922): {scan} scan of (362 files) in progress... Jan 21 03:41:12 root maldet(30922): {scan} scan completed on : files 362, malware hits 0, cleaned hits 0, time 29s Jan 21 03:41:12 root maldet(30922): {scan} scan report saved, to view run: maldet --report 230121-0340.30922 Jan 22 03:31:26 root maldet(14980): {update} checking for available updates... Jan 22 03:31:27 root maldet(14980): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 22 03:31:27 root maldet(14980): {update} hashing install files and checking against server... Jan 22 03:31:27 root maldet(14980): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 22 03:31:27 root maldet(14980): {update} latest version already installed. Jan 22 03:31:27 root maldet(15122): {sigup} performing signature update check... Jan 22 03:31:27 root maldet(15122): {sigup} local signature set is version 20230119469445 Jan 22 03:31:27 root maldet(15122): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 22 03:31:27 root maldet(15122): {sigup} latest signature set already installed Jan 22 03:31:28 root maldet(15251): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 22 03:31:31 root maldet(15251): {scan} signatures loaded: 17368 (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 22 03:31:31 root maldet(15251): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 22 03:31:31 root maldet(15251): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 22 03:31:31 root maldet(15251): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 22 03:31:40 root maldet(15251): {scan} file list completed in 9s, found 390 files... Jan 22 03:31:40 root maldet(15251): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 22 03:31:40 root maldet(15251): {scan} scan of (390 files) in progress... Jan 22 03:32:47 root maldet(15251): {scan} scan completed on : files 390, malware hits 0, cleaned hits 0, time 79s Jan 22 03:32:47 root maldet(15251): {scan} scan report saved, to view run: maldet --report 230122-0331.15251 Jan 23 03:22:41 root maldet(6692): {update} checking for available updates... Jan 23 03:22:41 root maldet(6692): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 23 03:22:41 root maldet(6692): {update} hashing install files and checking against server... Jan 23 03:22:42 root maldet(6692): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 23 03:22:42 root maldet(6692): {update} latest version already installed. Jan 23 03:22:42 root maldet(6866): {sigup} performing signature update check... Jan 23 03:22:42 root maldet(6866): {sigup} local signature set is version 20230119469445 Jan 23 03:22:42 root maldet(6866): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 23 03:22:42 root maldet(6866): {sigup} new signature set 202301221156048 available Jan 23 03:22:42 root maldet(6866): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 23 03:22:42 root maldet(6866): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 23 03:22:43 root maldet(6866): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 23 03:22:43 root maldet(6866): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 23 03:22:43 root maldet(6866): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 23 03:22:43 root maldet(6866): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 23 03:22:43 root maldet(6866): {sigup} verified md5sum of maldet-sigpack.tgz Jan 23 03:22:43 root maldet(6866): {sigup} unpacked and installed maldet-sigpack.tgz Jan 23 03:22:43 root maldet(6866): {sigup} verified md5sum of maldet-clean.tgz Jan 23 03:22:43 root maldet(6866): {sigup} unpacked and installed maldet-clean.tgz Jan 23 03:22:43 root maldet(6866): {sigup} signature set update completed Jan 23 03:22:43 root maldet(6866): {sigup} 17368 signatures (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 23 03:22:44 root maldet(7165): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 23 03:22:44 root maldet(7165): {scan} signatures loaded: 17368 (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 23 03:22:44 root maldet(7165): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 23 03:22:44 root maldet(7165): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 23 03:22:44 root maldet(7165): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 23 03:22:51 root maldet(7165): {scan} file list completed in 7s, found 128 files... Jan 23 03:22:51 root maldet(7165): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 23 03:22:51 root maldet(7165): {scan} scan of (128 files) in progress... Jan 23 03:24:09 root maldet(7165): {scan} scan completed on : files 128, malware hits 0, cleaned hits 0, time 85s Jan 23 03:24:09 root maldet(7165): {scan} scan report saved, to view run: maldet --report 230123-0322.7165 Jan 24 03:13:08 root maldet(30917): {update} checking for available updates... Jan 24 03:13:08 root maldet(30917): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 24 03:13:08 root maldet(30917): {update} hashing install files and checking against server... Jan 24 03:13:09 root maldet(30917): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 24 03:13:09 root maldet(30917): {update} latest version already installed. Jan 24 03:13:09 root maldet(31051): {sigup} performing signature update check... Jan 24 03:13:09 root maldet(31051): {sigup} local signature set is version 202301221156048 Jan 24 03:13:09 root maldet(31051): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 24 03:13:09 root maldet(31051): {sigup} latest signature set already installed Jan 24 03:13:10 root maldet(31164): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 24 03:13:11 root maldet(31164): {scan} signatures loaded: 17368 (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 24 03:13:11 root maldet(31164): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 24 03:13:11 root maldet(31164): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 24 03:13:11 root maldet(31164): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 24 03:13:17 root maldet(31164): {scan} file list completed in 6s, found 93 files... Jan 24 03:13:17 root maldet(31164): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 24 03:13:17 root maldet(31164): {scan} scan of (93 files) in progress... Jan 24 03:15:14 root maldet(31164): {hit} malware hit {YARA}webshell_gfs_sh_r57shell_r57shell127_SnIpEr_SA_xxx found for /home/dnrassociates/public_html/Dashboard/fckeditor/editor/dialog/fck_about/sponsors/manageadmin.php Jan 24 03:15:14 root maldet(31164): {quar} malware quarantined from '/home/dnrassociates/public_html/Dashboard/fckeditor/editor/dialog/fck_about/sponsors/manageadmin.php' to '/usr/local/maldetect/quarantine/manageadmin.php.2711131513' Jan 24 03:15:14 root maldet(31164): {hit} malware hit {HEX}php.malware.charnested.563 found for /home/dnrassociates/public_html/Dashboard/fckeditor/editor/filemanager/browser/default/js/sample03.php Jan 24 03:15:14 root maldet(31164): {quar} malware quarantined from '/home/dnrassociates/public_html/Dashboard/fckeditor/editor/filemanager/browser/default/js/sample03.php' to '/usr/local/maldetect/quarantine/sample03.php.1915416834' Jan 24 03:15:14 root maldet(31164): {hit} malware hit {CAV}Win.Trojan.Hide-1 found for /home/dnrassociates/public_html/Dashboard/img/icons/packs/fugue/24x24/zonecheck.php Jan 24 03:15:14 root maldet(31164): {quar} malware quarantined from '/home/dnrassociates/public_html/Dashboard/img/icons/packs/fugue/24x24/zonecheck.php' to '/usr/local/maldetect/quarantine/zonecheck.php.102291843' Jan 24 03:15:14 root maldet(31164): {hit} malware hit {YARA}multiple_php_webshells found for /home/dnrassociates/public_html/Dashboard/img/icons/packs/fugue/addmenu.php Jan 24 03:15:14 root maldet(31164): {quar} malware quarantined from '/home/dnrassociates/public_html/Dashboard/img/icons/packs/fugue/addmenu.php' to '/usr/local/maldetect/quarantine/addmenu.php.1887024681' Jan 24 03:15:14 root maldet(31164): {scan} scan completed on : files 93, malware hits 4, cleaned hits 0, time 124s Jan 24 03:15:14 root maldet(31164): {scan} scan report saved, to view run: maldet --report 230124-0313.31164 Jan 25 03:41:55 root maldet(3252): {update} checking for available updates... Jan 25 03:41:56 root maldet(3252): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 25 03:41:56 root maldet(3252): {update} hashing install files and checking against server... Jan 25 03:41:56 root maldet(3252): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 25 03:41:56 root maldet(3252): {update} latest version already installed. Jan 25 03:41:56 root maldet(3389): {sigup} performing signature update check... Jan 25 03:41:56 root maldet(3389): {sigup} local signature set is version 202301221156048 Jan 25 03:41:56 root maldet(3389): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 25 03:41:56 root maldet(3389): {sigup} latest signature set already installed Jan 25 03:41:56 root maldet(3505): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 25 03:42:00 root maldet(3505): {scan} signatures loaded: 17368 (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 25 03:42:00 root maldet(3505): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 25 03:42:00 root maldet(3505): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 25 03:42:00 root maldet(3505): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 25 04:14:36 root maldet(3505): {scan} file list completed in 1956s, found 1571 files... Jan 25 04:14:36 root maldet(3505): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 25 04:14:36 root maldet(3505): {scan} scan of (1571 files) in progress... Jan 25 04:16:10 root maldet(3505): {scan} scan completed on : files 1571, malware hits 0, cleaned hits 0, time 2054s Jan 25 04:16:10 root maldet(3505): {scan} scan report saved, to view run: maldet --report 230125-0341.3505 Jan 26 03:29:03 root maldet(14455): {update} checking for available updates... Jan 26 03:29:04 root maldet(14455): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 26 03:29:04 root maldet(14455): {update} hashing install files and checking against server... Jan 26 03:29:04 root maldet(14455): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 26 03:29:04 root maldet(14455): {update} latest version already installed. Jan 26 03:29:04 root maldet(14597): {sigup} performing signature update check... Jan 26 03:29:04 root maldet(14597): {sigup} local signature set is version 202301221156048 Jan 26 03:29:04 root maldet(14597): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 26 03:29:04 root maldet(14597): {sigup} new signature set 202301251839407 available Jan 26 03:29:04 root maldet(14597): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 26 03:29:05 root maldet(14597): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 26 03:29:05 root maldet(14597): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 26 03:29:05 root maldet(14597): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 26 03:29:05 root maldet(14597): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 26 03:29:05 root maldet(14597): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 26 03:29:05 root maldet(14597): {sigup} verified md5sum of maldet-sigpack.tgz Jan 26 03:29:06 root maldet(14597): {sigup} unpacked and installed maldet-sigpack.tgz Jan 26 03:29:06 root maldet(14597): {sigup} verified md5sum of maldet-clean.tgz Jan 26 03:29:06 root maldet(14597): {sigup} unpacked and installed maldet-clean.tgz Jan 26 03:29:06 root maldet(14597): {sigup} signature set update completed Jan 26 03:29:06 root maldet(14597): {sigup} 17368 signatures (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 26 03:29:06 root maldet(14848): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 26 03:29:07 root maldet(14848): {scan} signatures loaded: 17368 (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 26 03:29:07 root maldet(14848): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 26 03:29:07 root maldet(14848): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 26 03:29:07 root maldet(14848): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 26 03:29:14 root maldet(14848): {scan} file list completed in 7s, found 6363 files... Jan 26 03:29:14 root maldet(14848): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 26 03:29:14 root maldet(14848): {scan} scan of (6363 files) in progress... Jan 26 03:34:07 root maldet(14848): {scan} scan completed on : files 6363, malware hits 0, cleaned hits 0, time 301s Jan 26 03:34:07 root maldet(14848): {scan} scan report saved, to view run: maldet --report 230126-0329.14848 Jan 28 15:17:45 root maldet(1098): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/ Jan 28 16:33:33 root maldet(30191): {update} checking for available updates... Jan 28 16:33:33 root maldet(30191): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 28 16:33:33 root maldet(30191): {update} hashing install files and checking against server... Jan 28 16:33:33 root maldet(30191): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 28 16:33:33 root maldet(30191): {update} latest version already installed. Jan 28 16:33:34 root maldet(30326): {sigup} performing signature update check... Jan 28 16:33:34 root maldet(30326): {sigup} local signature set is version 202301251839407 Jan 28 16:33:34 root maldet(30326): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 28 16:33:34 root maldet(30326): {sigup} new signature set 202301282522356 available Jan 28 16:33:34 root maldet(30326): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 28 16:33:34 root maldet(30326): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jan 28 16:33:34 root maldet(30326): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jan 28 16:33:34 root maldet(30326): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 28 16:33:35 root maldet(30326): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jan 28 16:33:35 root maldet(30326): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jan 28 16:33:35 root maldet(30326): {sigup} verified md5sum of maldet-sigpack.tgz Jan 28 16:33:35 root maldet(30326): {sigup} unpacked and installed maldet-sigpack.tgz Jan 28 16:33:35 root maldet(30326): {sigup} verified md5sum of maldet-clean.tgz Jan 28 16:33:35 root maldet(30326): {sigup} unpacked and installed maldet-clean.tgz Jan 28 16:33:35 root maldet(30326): {sigup} signature set update completed Jan 28 16:33:35 root maldet(30326): {sigup} 17368 signatures (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 28 16:33:35 root maldet(30564): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 28 16:33:36 root maldet(30564): {scan} signatures loaded: 17368 (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 28 16:33:36 root maldet(30564): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 28 16:33:36 root maldet(30564): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 28 16:33:36 root maldet(30564): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 28 16:33:43 root maldet(30564): {scan} file list completed in 7s, found 56 files... Jan 28 16:33:43 root maldet(30564): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 28 16:33:43 root maldet(30564): {scan} scan of (56 files) in progress... Jan 28 16:33:55 root maldet(30564): {scan} scan completed on : files 56, malware hits 0, cleaned hits 0, time 20s Jan 28 16:33:55 root maldet(30564): {scan} scan report saved, to view run: maldet --report 230128-1633.30564 Jan 29 03:40:21 root maldet(4926): {update} checking for available updates... Jan 29 03:40:21 root maldet(4926): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 29 03:40:21 root maldet(4926): {update} hashing install files and checking against server... Jan 29 03:40:22 root maldet(4926): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 29 03:40:22 root maldet(4926): {update} latest version already installed. Jan 29 03:40:22 root maldet(5096): {sigup} performing signature update check... Jan 29 03:40:22 root maldet(5096): {sigup} local signature set is version 202301282522356 Jan 29 03:40:22 root maldet(5096): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 29 03:40:22 root maldet(5096): {sigup} latest signature set already installed Jan 29 03:40:22 root maldet(5216): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 29 03:40:23 root maldet(5216): {scan} signatures loaded: 17368 (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 29 03:40:23 root maldet(5216): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 29 03:40:23 root maldet(5216): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 29 03:40:23 root maldet(5216): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 29 03:40:31 root maldet(5216): {scan} file list completed in 8s, found 84 files... Jan 29 03:40:31 root maldet(5216): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 29 03:40:31 root maldet(5216): {scan} scan of (84 files) in progress... Jan 29 03:40:40 root maldet(5216): {scan} scan completed on : files 84, malware hits 0, cleaned hits 0, time 18s Jan 29 03:40:40 root maldet(5216): {scan} scan report saved, to view run: maldet --report 230129-0340.5216 Jan 30 03:37:29 root maldet(18186): {update} checking for available updates... Jan 30 03:37:29 root maldet(18186): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jan 30 03:37:29 root maldet(18186): {update} hashing install files and checking against server... Jan 30 03:37:29 root maldet(18186): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jan 30 03:37:29 root maldet(18186): {update} latest version already installed. Jan 30 03:37:29 root maldet(18324): {sigup} performing signature update check... Jan 30 03:37:29 root maldet(18324): {sigup} local signature set is version 202301282522356 Jan 30 03:37:30 root maldet(18324): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jan 30 03:37:30 root maldet(18324): {sigup} latest signature set already installed Jan 30 03:37:30 root maldet(18436): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 30 03:37:30 root maldet(18436): {scan} signatures loaded: 17368 (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 30 03:37:30 root maldet(18436): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 30 03:37:30 root maldet(18436): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 30 03:37:30 root maldet(18436): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jan 30 03:37:37 root maldet(18436): {scan} file list completed in 7s, found 123 files... Jan 30 03:37:37 root maldet(18436): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jan 30 03:37:37 root maldet(18436): {scan} scan of (123 files) in progress... Jan 30 03:37:38 root maldet(18436): {scan} scan completed on : files 123, malware hits 0, cleaned hits 0, time 8s Jan 30 03:37:38 root maldet(18436): {scan} scan report saved, to view run: maldet --report 230130-0337.18436 Jan 31 03:40:52 root maldet(26275): {update} checking for available updates... Jan 31 03:40:52 root maldet(26275): {update} could not download https://cdn.rfxn.com/downloads/maldet.current.ver, please try again later. Jan 31 03:40:52 root maldet(26275): {update} could not download version file from server, please try again later. Jan 31 03:40:52 root maldet(26370): {sigup} performing signature update check... Jan 31 03:40:52 root maldet(26370): {sigup} local signature set is version 202301282522356 Jan 31 03:40:54 root maldet(26370): {sigup} could not download https://cdn.rfxn.com/downloads/maldet.sigs.ver, please try again later. Jan 31 03:40:54 root maldet(26370): {sigup} could not download signature data from server, please try again later. Jan 31 03:40:54 root maldet(26474): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jan 31 03:40:55 root maldet(26474): {scan} signatures loaded: 17368 (14531 MD5 | 2054 HEX | 783 YARA | 0 USER) Jan 31 03:40:55 root maldet(26474): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Jan 31 03:40:55 root maldet(26474): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jan 31 03:40:55 root maldet(26474): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/publiFeb 01 03:30:51 root maldet(29854): {update} checking for available updates... Feb 01 03:30:51 root maldet(29854): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 01 03:30:51 root maldet(29854): {update} hashing install files and checking against server... Feb 01 03:30:51 root maldet(29854): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 01 03:30:51 root maldet(29854): {update} latest version already installed. Feb 01 03:30:53 root maldet(30006): {sigup} performing signature update check... Feb 01 03:30:53 root maldet(30006): {sigup} local signature set is version 202301282522356 Feb 01 03:30:53 root maldet(30006): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 01 03:30:54 root maldet(30006): {sigup} new signature set 202301313203240 available Feb 01 03:30:54 root maldet(30006): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 01 03:30:54 root maldet(30006): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 01 03:30:55 root maldet(30006): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 01 03:30:55 root maldet(30006): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 01 03:30:55 root maldet(30006): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 01 03:30:55 root maldet(30006): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 01 03:30:55 root maldet(30006): {sigup} verified md5sum of maldet-sigpack.tgz Feb 01 03:30:57 root maldet(30006): {sigup} unpacked and installed maldet-sigpack.tgz Feb 01 03:30:58 root maldet(30006): {sigup} verified md5sum of maldet-clean.tgz Feb 01 03:30:58 root maldet(30006): {sigup} unpacked and installed maldet-clean.tgz Feb 01 03:30:58 root maldet(30006): {sigup} signature set update completed Feb 01 03:30:58 root maldet(30006): {sigup} 17369 signatures (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 01 03:30:59 root maldet(30313): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 01 03:31:02 root maldet(30313): {scan} signatures loaded: 17369 (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 01 03:31:02 root maldet(30313): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 01 03:31:02 root maldet(30313): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 01 03:31:02 root maldet(30313): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/casrc/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/colorpaletteco/public_html/" "/home/companyr/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/easytripsidcul/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/getbillionaire/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/gstonline/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/kiosksystems/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/loantree/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/mediaconsultants/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/opsutility/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/sgnfinserve/public_html/" "/home/shopyz/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/sriaadarshacadem/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 01 03:58:34 root maldet(30313): {scan} file list completed in 1652s, found 25011 files... Feb 01 03:58:34 root maldet(30313): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 01 03:58:34 root maldet(30313): {scan} scan of (25011 files) in progress... Feb 01 05:08:27 root maldet(30313): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Feb 01 05:08:27 root maldet(30313): {scan} scan completed on : files 25011, malware hits 0, cleaned hits 0, time 5848s Feb 01 05:08:27 root maldet(30313): {scan} scan report saved, to view run: maldet --report 230201-0330.30313 Feb 02 03:43:13 root maldet(4474): {update} checking for available updates... Feb 02 03:43:14 root maldet(4474): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 02 03:43:14 root maldet(4474): {update} hashing install files and checking against server... Feb 02 03:43:15 root maldet(4474): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 02 03:43:15 root maldet(4474): {update} latest version already installed. Feb 02 03:43:15 root maldet(4620): {sigup} performing signature update check... Feb 02 03:43:15 root maldet(4620): {sigup} local signature set is version 202301313203240 Feb 02 03:43:16 root maldet(4620): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 02 03:43:16 root maldet(4620): {sigup} new signature set 202302013842687 available Feb 02 03:43:16 root maldet(4620): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 02 03:43:16 root maldet(4620): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 02 03:43:17 root maldet(4620): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 02 03:43:17 root maldet(4620): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 02 03:43:17 root maldet(4620): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 02 03:43:17 root maldet(4620): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 02 03:43:17 root maldet(4620): {sigup} verified md5sum of maldet-sigpack.tgz Feb 02 03:43:17 root maldet(4620): {sigup} unpacked and installed maldet-sigpack.tgz Feb 02 03:43:17 root maldet(4620): {sigup} verified md5sum of maldet-clean.tgz Feb 02 03:43:17 root maldet(4620): {sigup} unpacked and installed maldet-clean.tgz Feb 02 03:43:17 root maldet(4620): {sigup} signature set update completed Feb 02 03:43:17 root maldet(4620): {sigup} 17369 signatures (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 02 03:43:17 root maldet(4883): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 02 03:43:18 root maldet(4883): {scan} signatures loaded: 17369 (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 02 03:43:18 root maldet(4883): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 02 03:43:18 root maldet(4883): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 02 03:43:18 root maldet(4883): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 02 03:43:26 root maldet(4883): {scan} file list completed in 8s, found 142 files... Feb 02 03:43:26 root maldet(4883): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 02 03:43:26 root maldet(4883): {scan} scan of (142 files) in progress... Feb 02 03:43:40 root maldet(4883): {scan} scan completed on : files 142, malware hits 0, cleaned hits 0, time 23s Feb 02 03:43:40 root maldet(4883): {scan} scan report saved, to view run: maldet --report 230202-0343.4883 Feb 03 03:44:42 root maldet(24307): {update} checking for available updates... Feb 03 03:44:42 root maldet(24307): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 03 03:44:42 root maldet(24307): {update} hashing install files and checking against server... Feb 03 03:44:42 root maldet(24307): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 03 03:44:42 root maldet(24307): {update} latest version already installed. Feb 03 03:44:43 root maldet(24444): {sigup} performing signature update check... Feb 03 03:44:43 root maldet(24444): {sigup} local signature set is version 202302013842687 Feb 03 03:44:43 root maldet(24444): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 03 03:44:43 root maldet(24444): {sigup} latest signature set already installed Feb 03 03:44:43 root maldet(24558): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 03 03:44:43 root maldet(24558): {scan} signatures loaded: 17369 (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 03 03:44:43 root maldet(24558): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 03 03:44:43 root maldet(24558): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 03 03:44:43 root maldet(24558): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 03 03:44:50 root maldet(24558): {scan} file list completed in 7s, found 15539 files... Feb 03 03:44:50 root maldet(24558): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 03 03:44:50 root maldet(24558): {scan} scan of (15539 files) in progress... Feb 03 03:51:49 root maldet(24558): {scan} scan completed on : files 15539, malware hits 0, cleaned hits 0, time 426s Feb 03 03:51:49 root maldet(24558): {scan} scan report saved, to view run: maldet --report 230203-0344.24558 Feb 04 03:45:03 root maldet(4655): {update} checking for available updates... Feb 04 03:45:04 root maldet(4655): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 04 03:45:04 root maldet(4655): {update} hashing install files and checking against server... Feb 04 03:45:04 root maldet(4655): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 04 03:45:04 root maldet(4655): {update} latest version already installed. Feb 04 03:45:04 root maldet(4826): {sigup} performing signature update check... Feb 04 03:45:04 root maldet(4826): {sigup} local signature set is version 202302013842687 Feb 04 03:45:05 root maldet(4826): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 04 03:45:05 root maldet(4826): {sigup} latest signature set already installed Feb 04 03:45:05 root maldet(4943): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 04 03:45:05 root maldet(4943): {scan} signatures loaded: 17369 (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 04 03:45:05 root maldet(4943): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 04 03:45:05 root maldet(4943): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 04 03:45:05 root maldet(4943): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bookaprofessiona/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/groupsriaadarsh/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/nishaaya/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rbassociates/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 04 03:45:12 root maldet(4943): {scan} file list completed in 7s, found 6738 files... Feb 04 03:45:12 root maldet(4943): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 04 03:45:12 root maldet(4943): {scan} scan of (6738 files) in progress... Feb 04 03:46:51 root maldet(4943): {scan} scan completed on : files 6738, malware hits 0, cleaned hits 0, time 106s Feb 04 03:46:51 root maldet(4943): {scan} scan report saved, to view run: maldet --report 230204-0345.4943 Feb 05 03:20:00 root maldet(30776): {update} checking for available updates... Feb 05 03:20:00 root maldet(30776): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 05 03:20:00 root maldet(30776): {update} hashing install files and checking against server... Feb 05 03:20:00 root maldet(30776): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 05 03:20:00 root maldet(30776): {update} latest version already installed. Feb 05 03:20:01 root maldet(30917): {sigup} performing signature update check... Feb 05 03:20:01 root maldet(30917): {sigup} local signature set is version 202302013842687 Feb 05 03:20:01 root maldet(30917): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 05 03:20:01 root maldet(30917): {sigup} new signature set 20230204330228 available Feb 05 03:20:01 root maldet(30917): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 05 03:20:01 root maldet(30917): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 05 03:20:02 root maldet(30917): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 05 03:20:02 root maldet(30917): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 05 03:20:03 root maldet(30917): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 05 03:20:03 root maldet(30917): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 05 03:20:03 root maldet(30917): {sigup} verified md5sum of maldet-sigpack.tgz Feb 05 03:20:04 root maldet(30917): {sigup} unpacked and installed maldet-sigpack.tgz Feb 05 03:20:04 root maldet(30917): {sigup} verified md5sum of maldet-clean.tgz Feb 05 03:20:04 root maldet(30917): {sigup} unpacked and installed maldet-clean.tgz Feb 05 03:20:04 root maldet(30917): {sigup} signature set update completed Feb 05 03:20:04 root maldet(30917): {sigup} 17369 signatures (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 05 03:20:04 root maldet(31617): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 05 03:20:05 root maldet(31617): {scan} signatures loaded: 17369 (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 05 03:20:05 root maldet(31617): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 05 03:20:05 root maldet(31617): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 05 03:20:05 root maldet(31617): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 05 03:29:36 root maldet(31617): {scan} file list completed in 571s, found 18284 files... Feb 05 03:29:36 root maldet(31617): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 05 03:29:36 root maldet(31617): {scan} scan of (18284 files) in progress... Feb 05 04:05:05 root maldet(31617): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Feb 05 04:05:05 root maldet(31617): {scan} scan completed on : files 18284, malware hits 0, cleaned hits 0, time 2701s Feb 05 04:05:05 root maldet(31617): {scan} scan report saved, to view run: maldet --report 230205-0320.31617 Feb 06 03:57:46 root maldet(20678): {update} checking for available updates... Feb 06 03:57:47 root maldet(20678): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 06 03:57:47 root maldet(20678): {update} hashing install files and checking against server... Feb 06 03:57:47 root maldet(20678): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 06 03:57:47 root maldet(20678): {update} latest version already installed. Feb 06 03:57:47 root maldet(20828): {sigup} performing signature update check... Feb 06 03:57:47 root maldet(20828): {sigup} local signature set is version 20230204330228 Feb 06 03:57:47 root maldet(20828): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 06 03:57:47 root maldet(20828): {sigup} latest signature set already installed Feb 06 03:57:47 root maldet(20944): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 06 03:57:48 root maldet(20944): {scan} signatures loaded: 17369 (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 06 03:57:48 root maldet(20944): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 06 03:57:48 root maldet(20944): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 06 03:57:48 root maldet(20944): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 06 03:57:56 root maldet(20944): {scan} file list completed in 8s, found 341 files... Feb 06 03:57:56 root maldet(20944): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 06 03:57:56 root maldet(20944): {scan} scan of (341 files) in progress... Feb 06 03:58:15 root maldet(20944): {scan} scan completed on : files 341, malware hits 0, cleaned hits 0, time 28s Feb 06 03:58:16 root maldet(20944): {scan} scan report saved, to view run: maldet --report 230206-0357.20944 Feb 07 03:26:26 root maldet(27804): {update} checking for available updates... Feb 07 03:26:26 root maldet(27804): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 07 03:26:26 root maldet(27804): {update} hashing install files and checking against server... Feb 07 03:26:27 root maldet(27804): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 07 03:26:27 root maldet(27804): {update} latest version already installed. Feb 07 03:26:27 root maldet(27943): {sigup} performing signature update check... Feb 07 03:26:27 root maldet(27943): {sigup} local signature set is version 20230204330228 Feb 07 03:26:27 root maldet(27943): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 07 03:26:27 root maldet(27943): {sigup} latest signature set already installed Feb 07 03:26:27 root maldet(28059): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 07 03:26:28 root maldet(28059): {scan} signatures loaded: 17369 (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 07 03:26:28 root maldet(28059): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 07 03:26:28 root maldet(28059): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 07 03:26:28 root maldet(28059): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 07 03:26:35 root maldet(28059): {scan} file list completed in 7s, found 4911 files... Feb 07 03:26:35 root maldet(28059): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 07 03:26:35 root maldet(28059): {scan} scan of (4911 files) in progress... Feb 07 03:29:24 root maldet(28059): {scan} scan completed on : files 4911, malware hits 0, cleaned hits 0, time 177s Feb 07 03:29:24 root maldet(28059): {scan} scan report saved, to view run: maldet --report 230207-0326.28059 Feb 08 03:32:53 root maldet(6596): {update} checking for available updates... Feb 08 03:32:53 root maldet(6596): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 08 03:32:53 root maldet(6596): {update} hashing install files and checking against server... Feb 08 03:32:53 root maldet(6596): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 08 03:32:53 root maldet(6596): {update} latest version already installed. Feb 08 03:32:54 root maldet(6736): {sigup} performing signature update check... Feb 08 03:32:54 root maldet(6736): {sigup} local signature set is version 20230204330228 Feb 08 03:32:55 root maldet(6736): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 08 03:32:55 root maldet(6736): {sigup} new signature set 20230207495205 available Feb 08 03:32:55 root maldet(6736): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 08 03:32:55 root maldet(6736): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 08 03:32:55 root maldet(6736): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 08 03:32:55 root maldet(6736): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 08 03:32:55 root maldet(6736): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 08 03:32:55 root maldet(6736): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 08 03:32:55 root maldet(6736): {sigup} verified md5sum of maldet-sigpack.tgz Feb 08 03:32:56 root maldet(6736): {sigup} unpacked and installed maldet-sigpack.tgz Feb 08 03:32:56 root maldet(6736): {sigup} verified md5sum of maldet-clean.tgz Feb 08 03:32:56 root maldet(6736): {sigup} unpacked and installed maldet-clean.tgz Feb 08 03:32:56 root maldet(6736): {sigup} signature set update completed Feb 08 03:32:56 root maldet(6736): {sigup} 17369 signatures (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 08 03:32:57 root maldet(6986): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 08 03:32:58 root maldet(6986): {scan} signatures loaded: 17369 (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 08 03:32:58 root maldet(6986): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 08 03:32:58 root maldet(6986): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 08 03:32:58 root maldet(6986): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camanojsingh/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinecfo/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptac1/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tajcertification/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 08 03:33:12 root maldet(6986): {scan} file list completed in 14s, found 3339 files... Feb 08 03:33:12 root maldet(6986): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 08 03:33:12 root maldet(6986): {scan} scan of (3339 files) in progress... Feb 08 03:47:35 root maldet(6986): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Feb 08 03:47:35 root maldet(6986): {scan} scan completed on : files 3339, malware hits 0, cleaned hits 0, time 878s Feb 08 03:47:35 root maldet(6986): {scan} scan report saved, to view run: maldet --report 230208-0332.6986 Feb 09 03:21:43 root maldet(5036): {update} checking for available updates... Feb 09 03:21:43 root maldet(5036): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 09 03:21:43 root maldet(5036): {update} hashing install files and checking against server... Feb 09 03:21:44 root maldet(5036): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 09 03:21:44 root maldet(5036): {update} latest version already installed. Feb 09 03:21:46 root maldet(5188): {sigup} performing signature update check... Feb 09 03:21:46 root maldet(5188): {sigup} local signature set is version 20230207495205 Feb 09 03:21:46 root maldet(5188): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 09 03:21:46 root maldet(5188): {sigup} latest signature set already installed Feb 09 03:21:47 root maldet(5309): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 09 03:21:47 root maldet(5309): {scan} signatures loaded: 17369 (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 09 03:21:47 root maldet(5309): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 09 03:21:47 root maldet(5309): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 09 03:21:47 root maldet(5309): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajay/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 09 03:36:20 root maldet(5309): {scan} file list completed in 873s, found 4744 files... Feb 09 03:36:20 root maldet(5309): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 09 03:36:20 root maldet(5309): {scan} scan of (4744 files) in progress... Feb 09 03:40:00 root maldet(5309): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Feb 09 03:40:00 root maldet(5309): {scan} scan completed on : files 4744, malware hits 0, cleaned hits 0, time 1093s Feb 09 03:40:00 root maldet(5309): {scan} scan report saved, to view run: maldet --report 230209-0321.5309 Feb 10 03:23:01 root maldet(12730): {update} checking for available updates... Feb 10 03:23:01 root maldet(12730): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 10 03:23:01 root maldet(12730): {update} hashing install files and checking against server... Feb 10 03:23:01 root maldet(12730): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 10 03:23:01 root maldet(12730): {update} latest version already installed. Feb 10 03:23:01 root maldet(12887): {sigup} performing signature update check... Feb 10 03:23:01 root maldet(12887): {sigup} local signature set is version 20230207495205 Feb 10 03:23:01 root maldet(12887): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 10 03:23:01 root maldet(12887): {sigup} latest signature set already installed Feb 10 03:23:02 root maldet(13004): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 10 03:23:02 root maldet(13004): {scan} signatures loaded: 17369 (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 10 03:23:02 root maldet(13004): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 10 03:23:02 root maldet(13004): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 10 03:23:02 root maldet(13004): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 10 03:23:06 root maldet(13004): {scan} file list completed in 4s, found 11334 files... Feb 10 03:23:06 root maldet(13004): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 10 03:23:06 root maldet(13004): {scan} scan of (11334 files) in progress... Feb 10 03:30:06 root maldet(13004): {scan} scan completed on : files 11334, malware hits 0, cleaned hits 0, time 424s Feb 10 03:30:06 root maldet(13004): {scan} scan report saved, to view run: maldet --report 230210-0323.13004 Feb 11 03:48:38 root maldet(32118): {update} checking for available updates... Feb 11 03:48:38 root maldet(32118): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 11 03:48:38 root maldet(32118): {update} hashing install files and checking against server... Feb 11 03:48:39 root maldet(32118): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 11 03:48:39 root maldet(32118): {update} latest version already installed. Feb 11 03:48:39 root maldet(32258): {sigup} performing signature update check... Feb 11 03:48:39 root maldet(32258): {sigup} local signature set is version 20230207495205 Feb 11 03:48:39 root maldet(32258): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 11 03:48:39 root maldet(32258): {sigup} new signature set 202302101180050 available Feb 11 03:48:39 root maldet(32258): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 11 03:48:39 root maldet(32258): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 11 03:48:40 root maldet(32258): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 11 03:48:40 root maldet(32258): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 11 03:48:40 root maldet(32258): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 11 03:48:40 root maldet(32258): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 11 03:48:40 root maldet(32258): {sigup} verified md5sum of maldet-sigpack.tgz Feb 11 03:48:40 root maldet(32258): {sigup} unpacked and installed maldet-sigpack.tgz Feb 11 03:48:40 root maldet(32258): {sigup} verified md5sum of maldet-clean.tgz Feb 11 03:48:40 root maldet(32258): {sigup} unpacked and installed maldet-clean.tgz Feb 11 03:48:40 root maldet(32258): {sigup} signature set update completed Feb 11 03:48:40 root maldet(32258): {sigup} 17369 signatures (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 11 03:48:40 root maldet(32515): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 11 03:48:41 root maldet(32515): {scan} signatures loaded: 17369 (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 11 03:48:41 root maldet(32515): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 11 03:48:41 root maldet(32515): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 11 03:48:41 root maldet(32515): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 11 03:48:44 root maldet(32515): {scan} file list completed in 3s, found 3035 files... Feb 11 03:48:44 root maldet(32515): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 11 03:48:44 root maldet(32515): {scan} scan of (3035 files) in progress... Feb 11 03:50:42 root maldet(32515): {scan} scan completed on : files 3035, malware hits 0, cleaned hits 0, time 120s Feb 11 03:50:42 root maldet(32515): {scan} scan report saved, to view run: maldet --report 230211-0348.32515 Feb 12 04:00:07 root maldet(19658): {update} checking for available updates... Feb 12 04:00:08 root maldet(19658): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 12 04:00:08 root maldet(19658): {update} hashing install files and checking against server... Feb 12 04:00:08 root maldet(19658): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 12 04:00:08 root maldet(19658): {update} latest version already installed. Feb 12 04:00:08 root maldet(19823): {sigup} performing signature update check... Feb 12 04:00:08 root maldet(19823): {sigup} local signature set is version 202302101180050 Feb 12 04:00:09 root maldet(19823): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 12 04:00:09 root maldet(19823): {sigup} latest signature set already installed Feb 12 04:00:09 root maldet(19958): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 12 04:00:10 root maldet(19958): {scan} signatures loaded: 17369 (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 12 04:00:10 root maldet(19958): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 12 04:00:10 root maldet(19958): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 12 04:00:10 root maldet(19958): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 12 04:12:08 root maldet(19958): {scan} file list completed in 718s, found 386 files... Feb 12 04:12:08 root maldet(19958): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 12 04:12:08 root maldet(19958): {scan} scan of (386 files) in progress... Feb 12 04:13:03 root maldet(19958): {scan} scan completed on : files 386, malware hits 0, cleaned hits 0, time 774s Feb 12 04:13:03 root maldet(19958): {scan} scan report saved, to view run: maldet --report 230212-0400.19958 Feb 13 03:44:39 root maldet(18960): {update} checking for available updates... Feb 13 03:44:39 root maldet(18960): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 13 03:44:39 root maldet(18960): {update} hashing install files and checking against server... Feb 13 03:44:39 root maldet(18960): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 13 03:44:39 root maldet(18960): {update} latest version already installed. Feb 13 03:44:39 root maldet(19104): {sigup} performing signature update check... Feb 13 03:44:39 root maldet(19104): {sigup} local signature set is version 202302101180050 Feb 13 03:44:39 root maldet(19104): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 13 03:44:40 root maldet(19104): {sigup} latest signature set already installed Feb 13 03:44:40 root maldet(19218): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 13 03:44:41 root maldet(19218): {scan} signatures loaded: 17369 (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 13 03:44:41 root maldet(19218): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 13 03:44:41 root maldet(19218): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 13 03:44:41 root maldet(19218): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 13 04:08:47 root maldet(19218): {scan} file list completed in 1446s, found 188 files... Feb 13 04:08:47 root maldet(19218): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 13 04:08:47 root maldet(19218): {scan} scan of (188 files) in progress... Feb 13 04:09:19 root maldet(19218): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Feb 13 04:09:19 root maldet(19218): {scan} scan completed on : files 188, malware hits 0, cleaned hits 0, time 1479s Feb 13 04:09:19 root maldet(19218): {scan} scan report saved, to view run: maldet --report 230213-0344.19218 Feb 14 03:32:16 root maldet(27082): {update} checking for available updates... Feb 14 03:32:16 root maldet(27082): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 14 03:32:16 root maldet(27082): {update} hashing install files and checking against server... Feb 14 03:32:16 root maldet(27082): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 14 03:32:16 root maldet(27082): {update} latest version already installed. Feb 14 03:32:19 root maldet(27232): {sigup} performing signature update check... Feb 14 03:32:19 root maldet(27232): {sigup} local signature set is version 202302101180050 Feb 14 03:32:19 root maldet(27232): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 14 03:32:19 root maldet(27232): {sigup} new signature set 202302131859847 available Feb 14 03:32:19 root maldet(27232): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 14 03:32:19 root maldet(27232): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 14 03:32:19 root maldet(27232): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 14 03:32:19 root maldet(27232): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 14 03:32:20 root maldet(27232): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 14 03:32:20 root maldet(27232): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 14 03:32:20 root maldet(27232): {sigup} verified md5sum of maldet-sigpack.tgz Feb 14 03:32:20 root maldet(27232): {sigup} unpacked and installed maldet-sigpack.tgz Feb 14 03:32:20 root maldet(27232): {sigup} verified md5sum of maldet-clean.tgz Feb 14 03:32:20 root maldet(27232): {sigup} unpacked and installed maldet-clean.tgz Feb 14 03:32:20 root maldet(27232): {sigup} signature set update completed Feb 14 03:32:20 root maldet(27232): {sigup} 17369 signatures (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 14 03:32:20 root maldet(27499): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 14 03:32:21 root maldet(27499): {scan} signatures loaded: 17369 (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 14 03:32:21 root maldet(27499): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 14 03:32:21 root maldet(27499): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 14 03:32:21 root maldet(27499): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 14 03:32:26 root maldet(27499): {scan} file list completed in 5s, found 453 files... Feb 14 03:32:26 root maldet(27499): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 14 03:32:26 root maldet(27499): {scan} scan of (453 files) in progress... Feb 14 03:33:06 root maldet(27499): {scan} scan completed on : files 453, malware hits 0, cleaned hits 0, time 45s Feb 14 03:33:06 root maldet(27499): {scan} scan report saved, to view run: maldet --report 230214-0332.27499 Feb 15 03:25:59 root maldet(8344): {update} checking for available updates... Feb 15 03:26:00 root maldet(8344): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 15 03:26:00 root maldet(8344): {update} hashing install files and checking against server... Feb 15 03:26:00 root maldet(8344): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 15 03:26:00 root maldet(8344): {update} latest version already installed. Feb 15 03:26:00 root maldet(8484): {sigup} performing signature update check... Feb 15 03:26:00 root maldet(8484): {sigup} local signature set is version 202302131859847 Feb 15 03:26:00 root maldet(8484): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 15 03:26:00 root maldet(8484): {sigup} latest signature set already installed Feb 15 03:26:01 root maldet(8597): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 15 03:26:01 root maldet(8597): {scan} signatures loaded: 17369 (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 15 03:26:01 root maldet(8597): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 15 03:26:01 root maldet(8597): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 15 03:26:01 root maldet(8597): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 15 03:26:06 root maldet(8597): {scan} file list completed in 5s, found 1142 files... Feb 15 03:26:06 root maldet(8597): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 15 03:26:06 root maldet(8597): {scan} scan of (1142 files) in progress... Feb 15 03:27:41 root maldet(8597): {scan} scan completed on : files 1142, malware hits 0, cleaned hits 0, time 100s Feb 15 03:27:41 root maldet(8597): {scan} scan report saved, to view run: maldet --report 230215-0326.8597 Feb 16 03:48:43 root maldet(8375): {update} checking for available updates... Feb 16 03:48:43 root maldet(8375): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 16 03:48:43 root maldet(8375): {update} hashing install files and checking against server... Feb 16 03:48:43 root maldet(8375): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 16 03:48:43 root maldet(8375): {update} latest version already installed. Feb 16 03:48:44 root maldet(8543): {sigup} performing signature update check... Feb 16 03:48:44 root maldet(8543): {sigup} local signature set is version 202302131859847 Feb 16 03:48:44 root maldet(8543): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 16 03:48:44 root maldet(8543): {sigup} latest signature set already installed Feb 16 03:48:44 root maldet(8660): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 16 03:48:46 root maldet(8660): {scan} signatures loaded: 17369 (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 16 03:48:46 root maldet(8660): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 16 03:48:46 root maldet(8660): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 16 03:48:46 root maldet(8660): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 16 04:07:22 root maldet(8660): {scan} file list completed in 1116s, found 163 files... Feb 16 04:07:22 root maldet(8660): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 16 04:07:22 root maldet(8660): {scan} scan of (163 files) in progress... Feb 16 04:07:58 root maldet(8660): {scan} scan completed on : files 163, malware hits 0, cleaned hits 0, time 1154s Feb 16 04:07:58 root maldet(8660): {scan} scan report saved, to view run: maldet --report 230216-0348.8660 Feb 17 03:29:34 root maldet(23964): {update} checking for available updates... Feb 17 03:29:34 root maldet(23964): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 17 03:29:34 root maldet(23964): {update} hashing install files and checking against server... Feb 17 03:29:34 root maldet(23964): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 17 03:29:34 root maldet(23964): {update} latest version already installed. Feb 17 03:29:35 root maldet(24113): {sigup} performing signature update check... Feb 17 03:29:35 root maldet(24113): {sigup} local signature set is version 202302131859847 Feb 17 03:29:35 root maldet(24113): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 17 03:29:35 root maldet(24113): {sigup} new signature set 202302162539481 available Feb 17 03:29:35 root maldet(24113): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 17 03:29:35 root maldet(24113): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 17 03:29:35 root maldet(24113): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 17 03:29:35 root maldet(24113): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 17 03:29:36 root maldet(24113): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 17 03:29:36 root maldet(24113): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 17 03:29:36 root maldet(24113): {sigup} verified md5sum of maldet-sigpack.tgz Feb 17 03:29:36 root maldet(24113): {sigup} unpacked and installed maldet-sigpack.tgz Feb 17 03:29:36 root maldet(24113): {sigup} verified md5sum of maldet-clean.tgz Feb 17 03:29:36 root maldet(24113): {sigup} unpacked and installed maldet-clean.tgz Feb 17 03:29:36 root maldet(24113): {sigup} signature set update completed Feb 17 03:29:36 root maldet(24113): {sigup} 17369 signatures (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 17 03:29:36 root maldet(24371): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 17 03:29:36 root maldet(24371): {scan} signatures loaded: 17369 (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 17 03:29:36 root maldet(24371): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 17 03:29:36 root maldet(24371): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 17 03:29:36 root maldet(24371): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 17 03:29:40 root maldet(24371): {scan} file list completed in 4s, found 184 files... Feb 17 03:29:40 root maldet(24371): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 17 03:29:40 root maldet(24371): {scan} scan of (184 files) in progress... Feb 17 03:29:53 root maldet(24371): {scan} scan completed on : files 184, malware hits 0, cleaned hits 0, time 17s Feb 17 03:29:53 root maldet(24371): {scan} scan report saved, to view run: maldet --report 230217-0329.24371 Feb 18 03:54:57 root maldet(17315): {update} checking for available updates... Feb 18 03:54:57 root maldet(17315): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 18 03:54:57 root maldet(17315): {update} hashing install files and checking against server... Feb 18 03:54:57 root maldet(17315): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 18 03:54:57 root maldet(17315): {update} latest version already installed. Feb 18 03:54:58 root maldet(17466): {sigup} performing signature update check... Feb 18 03:54:58 root maldet(17466): {sigup} local signature set is version 202302162539481 Feb 18 03:54:58 root maldet(17466): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 18 03:54:58 root maldet(17466): {sigup} latest signature set already installed Feb 18 03:54:58 root maldet(17601): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 18 03:54:58 root maldet(17601): {scan} signatures loaded: 17369 (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 18 03:54:58 root maldet(17601): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 18 03:54:58 root maldet(17601): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 18 03:54:58 root maldet(17601): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 18 03:55:03 root maldet(17601): {scan} file list completed in 5s, found 545 files... Feb 18 03:55:03 root maldet(17601): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 18 03:55:03 root maldet(17601): {scan} scan of (545 files) in progress... Feb 18 03:55:10 root maldet(17601): {scan} scan completed on : files 545, malware hits 0, cleaned hits 0, time 12s Feb 18 03:55:10 root maldet(17601): {scan} scan report saved, to view run: maldet --report 230218-0354.17601 Feb 19 03:38:03 root maldet(15808): {update} checking for available updates... Feb 19 03:38:03 root maldet(15808): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 19 03:38:03 root maldet(15808): {update} hashing install files and checking against server... Feb 19 03:38:03 root maldet(15808): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 19 03:38:03 root maldet(15808): {update} latest version already installed. Feb 19 03:38:03 root maldet(15985): {sigup} performing signature update check... Feb 19 03:38:03 root maldet(15985): {sigup} local signature set is version 202302162539481 Feb 19 03:38:04 root maldet(15985): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 19 03:38:04 root maldet(15985): {sigup} latest signature set already installed Feb 19 03:38:04 root maldet(16104): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 19 03:38:05 root maldet(16104): {scan} signatures loaded: 17369 (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 19 03:38:05 root maldet(16104): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 19 03:38:05 root maldet(16104): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 19 03:38:05 root maldet(16104): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 19 03:38:10 root maldet(16104): {scan} file list completed in 5s, found 320 files... Feb 19 03:38:10 root maldet(16104): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 19 03:38:10 root maldet(16104): {scan} scan of (320 files) in progress... Feb 19 03:38:37 root maldet(16104): {scan} scan completed on : files 320, malware hits 0, cleaned hits 0, time 33s Feb 19 03:38:37 root maldet(16104): {scan} scan report saved, to view run: maldet --report 230219-0338.16104 Feb 20 03:42:59 root maldet(15526): {update} checking for available updates... Feb 20 03:43:00 root maldet(15526): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 20 03:43:00 root maldet(15526): {update} hashing install files and checking against server... Feb 20 03:43:00 root maldet(15526): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 20 03:43:00 root maldet(15526): {update} latest version already installed. Feb 20 03:43:01 root maldet(15708): {sigup} performing signature update check... Feb 20 03:43:01 root maldet(15708): {sigup} local signature set is version 202302162539481 Feb 20 03:43:01 root maldet(15708): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 20 03:43:02 root maldet(15708): {sigup} new signature set 20230219483369 available Feb 20 03:43:02 root maldet(15708): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 20 03:43:03 root maldet(15708): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 20 03:43:03 root maldet(15708): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 20 03:43:03 root maldet(15708): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 20 03:43:03 root maldet(15708): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 20 03:43:03 root maldet(15708): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 20 03:43:03 root maldet(15708): {sigup} verified md5sum of maldet-sigpack.tgz Feb 20 03:43:05 root maldet(15708): {sigup} unpacked and installed maldet-sigpack.tgz Feb 20 03:43:05 root maldet(15708): {sigup} verified md5sum of maldet-clean.tgz Feb 20 03:43:05 root maldet(15708): {sigup} unpacked and installed maldet-clean.tgz Feb 20 03:43:05 root maldet(15708): {sigup} signature set update completed Feb 20 03:43:05 root maldet(15708): {sigup} 17369 signatures (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 20 03:43:05 root maldet(16036): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 20 03:43:07 root maldet(16036): {scan} signatures loaded: 17369 (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 20 03:43:07 root maldet(16036): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 20 03:43:07 root maldet(16036): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 20 03:43:07 root maldet(16036): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 20 04:08:50 root maldet(16036): {scan} file list completed in 1543s, found 74 files... Feb 20 04:08:50 root maldet(16036): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 20 04:08:50 root maldet(16036): {scan} scan of (74 files) in progress... Feb 20 04:09:26 root maldet(16036): {scan} scan completed on : files 74, malware hits 0, cleaned hits 0, time 1580s Feb 20 04:09:26 root maldet(16036): {scan} scan report saved, to view run: maldet --report 230220-0343.16036 Feb 21 03:26:42 root maldet(30182): {update} checking for available updates... Feb 21 03:26:42 root maldet(30182): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 21 03:26:42 root maldet(30182): {update} hashing install files and checking against server... Feb 21 03:26:42 root maldet(30182): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 21 03:26:42 root maldet(30182): {update} latest version already installed. Feb 21 03:26:43 root maldet(30321): {sigup} performing signature update check... Feb 21 03:26:43 root maldet(30321): {sigup} local signature set is version 20230219483369 Feb 21 03:26:43 root maldet(30321): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 21 03:26:43 root maldet(30321): {sigup} latest signature set already installed Feb 21 03:26:43 root maldet(30449): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 21 03:26:43 root maldet(30449): {scan} signatures loaded: 17369 (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 21 03:26:43 root maldet(30449): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 21 03:26:43 root maldet(30449): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 21 03:26:43 root maldet(30449): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 21 03:26:47 root maldet(30449): {scan} file list completed in 4s, found 9705 files... Feb 21 03:26:47 root maldet(30449): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 21 03:26:47 root maldet(30449): {scan} scan of (9705 files) in progress... Feb 21 03:29:36 root maldet(30449): {hit} malware hit {HEX}php.mailer.Mzh.556 found for /home/srgtechn/public_html/images/file/160f66.php Feb 21 03:29:36 root maldet(30449): {quar} malware quarantined from '/home/srgtechn/public_html/images/file/160f66.php' to '/usr/local/maldetect/quarantine/160f66.php.2147010857' Feb 21 03:29:36 root maldet(30449): {scan} scan completed on : files 9705, malware hits 1, cleaned hits 0, time 173s Feb 21 03:29:36 root maldet(30449): {scan} scan report saved, to view run: maldet --report 230221-0326.30449 Feb 22 03:43:55 root maldet(20478): {update} checking for available updates... Feb 22 03:43:56 root maldet(20478): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 22 03:43:56 root maldet(20478): {update} hashing install files and checking against server... Feb 22 03:43:56 root maldet(20478): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 22 03:43:56 root maldet(20478): {update} latest version already installed. Feb 22 03:43:56 root maldet(20733): {sigup} performing signature update check... Feb 22 03:43:56 root maldet(20733): {sigup} local signature set is version 20230219483369 Feb 22 03:43:57 root maldet(20733): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 22 03:43:58 root maldet(20733): {sigup} latest signature set already installed Feb 22 03:43:59 root maldet(20912): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 22 03:44:01 root maldet(20912): {scan} signatures loaded: 17369 (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 22 03:44:01 root maldet(20912): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 22 03:44:01 root maldet(20912): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 22 03:44:01 root maldet(20912): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 22 04:07:07 root maldet(20912): {scan} file list completed in 1386s, found 530 files... Feb 22 04:07:07 root maldet(20912): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 22 04:07:07 root maldet(20912): {scan} scan of (530 files) in progress... Feb 22 04:08:02 root maldet(20912): {scan} scan completed on : files 530, malware hits 0, cleaned hits 0, time 1443s Feb 22 04:08:02 root maldet(20912): {scan} scan report saved, to view run: maldet --report 230222-0343.20912 Feb 23 03:35:08 root maldet(16589): {update} checking for available updates... Feb 23 03:35:08 root maldet(16589): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 23 03:35:08 root maldet(16589): {update} hashing install files and checking against server... Feb 23 03:35:08 root maldet(16589): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 23 03:35:08 root maldet(16589): {update} latest version already installed. Feb 23 03:35:09 root maldet(16833): {sigup} performing signature update check... Feb 23 03:35:09 root maldet(16833): {sigup} local signature set is version 20230219483369 Feb 23 03:35:09 root maldet(16833): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 23 03:35:09 root maldet(16833): {sigup} new signature set 20230222484698 available Feb 23 03:35:09 root maldet(16833): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 23 03:35:10 root maldet(16833): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 23 03:35:10 root maldet(16833): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 23 03:35:10 root maldet(16833): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 23 03:35:10 root maldet(16833): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 23 03:35:11 root maldet(16833): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 23 03:35:11 root maldet(16833): {sigup} verified md5sum of maldet-sigpack.tgz Feb 23 03:35:11 root maldet(16833): {sigup} unpacked and installed maldet-sigpack.tgz Feb 23 03:35:11 root maldet(16833): {sigup} verified md5sum of maldet-clean.tgz Feb 23 03:35:11 root maldet(16833): {sigup} unpacked and installed maldet-clean.tgz Feb 23 03:35:11 root maldet(16833): {sigup} signature set update completed Feb 23 03:35:11 root maldet(16833): {sigup} 17369 signatures (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 23 03:35:12 root maldet(17097): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 23 03:35:13 root maldet(17097): {scan} signatures loaded: 17369 (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 23 03:35:13 root maldet(17097): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 23 03:35:13 root maldet(17097): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 23 03:35:13 root maldet(17097): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 23 04:07:18 root maldet(17097): {scan} file list completed in 1925s, found 150 files... Feb 23 04:07:18 root maldet(17097): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 23 04:07:18 root maldet(17097): {scan} scan of (150 files) in progress... Feb 23 04:07:57 root maldet(17097): {scan} scan completed on : files 150, malware hits 0, cleaned hits 0, time 1964s Feb 23 04:07:57 root maldet(17097): {scan} scan report saved, to view run: maldet --report 230223-0335.17097 Feb 24 03:56:50 root maldet(23954): {update} checking for available updates... Feb 24 03:56:50 root maldet(23954): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 24 03:56:50 root maldet(23954): {update} hashing install files and checking against server... Feb 24 03:56:50 root maldet(23954): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 24 03:56:50 root maldet(23954): {update} latest version already installed. Feb 24 03:56:51 root maldet(24094): {sigup} performing signature update check... Feb 24 03:56:51 root maldet(24094): {sigup} local signature set is version 20230222484698 Feb 24 03:56:51 root maldet(24094): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 24 03:56:51 root maldet(24094): {sigup} latest signature set already installed Feb 24 03:56:51 root maldet(24211): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 24 03:56:52 root maldet(24211): {scan} signatures loaded: 17369 (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 24 03:56:52 root maldet(24211): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 24 03:56:52 root maldet(24211): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 24 03:56:52 root maldet(24211): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 24 03:56:55 root maldet(24211): {scan} file list completed in 3s, found 159 files... Feb 24 03:56:55 root maldet(24211): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 24 03:56:55 root maldet(24211): {scan} scan of (159 files) in progress... Feb 24 03:57:05 root maldet(24211): {scan} scan completed on : files 159, malware hits 0, cleaned hits 0, time 14s Feb 24 03:57:05 root maldet(24211): {scan} scan report saved, to view run: maldet --report 230224-0356.24211 Feb 25 03:12:51 root maldet(7443): {update} checking for available updates... Feb 25 03:12:51 root maldet(7443): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 25 03:12:51 root maldet(7443): {update} hashing install files and checking against server... Feb 25 03:12:52 root maldet(7443): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 25 03:12:52 root maldet(7443): {update} latest version already installed. Feb 25 03:12:52 root maldet(7582): {sigup} performing signature update check... Feb 25 03:12:52 root maldet(7582): {sigup} local signature set is version 20230222484698 Feb 25 03:12:52 root maldet(7582): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 25 03:12:52 root maldet(7582): {sigup} latest signature set already installed Feb 25 03:12:52 root maldet(7697): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 25 03:12:53 root maldet(7697): {scan} signatures loaded: 17369 (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 25 03:12:53 root maldet(7697): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 25 03:12:53 root maldet(7697): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 25 03:12:53 root maldet(7697): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 25 03:12:57 root maldet(7697): {scan} file list completed in 3s, found 161 files... Feb 25 03:12:57 root maldet(7697): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 25 03:12:57 root maldet(7697): {scan} scan of (161 files) in progress... Feb 25 03:13:22 root maldet(7697): {scan} scan completed on : files 161, malware hits 0, cleaned hits 0, time 30s Feb 25 03:13:22 root maldet(7697): {scan} scan report saved, to view run: maldet --report 230225-0312.7697 Feb 26 03:46:58 root maldet(27358): {update} checking for available updates... Feb 26 03:46:58 root maldet(27358): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 26 03:46:58 root maldet(27358): {update} hashing install files and checking against server... Feb 26 03:46:58 root maldet(27358): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 26 03:46:58 root maldet(27358): {update} latest version already installed. Feb 26 03:46:59 root maldet(27494): {sigup} performing signature update check... Feb 26 03:46:59 root maldet(27494): {sigup} local signature set is version 20230222484698 Feb 26 03:46:59 root maldet(27494): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 26 03:47:00 root maldet(27494): {sigup} new signature set 202302251165796 available Feb 26 03:47:00 root maldet(27494): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 26 03:47:00 root maldet(27494): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 26 03:47:00 root maldet(27494): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 26 03:47:00 root maldet(27494): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 26 03:47:00 root maldet(27494): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 26 03:47:01 root maldet(27494): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 26 03:47:01 root maldet(27494): {sigup} verified md5sum of maldet-sigpack.tgz Feb 26 03:47:01 root maldet(27494): {sigup} unpacked and installed maldet-sigpack.tgz Feb 26 03:47:01 root maldet(27494): {sigup} verified md5sum of maldet-clean.tgz Feb 26 03:47:01 root maldet(27494): {sigup} unpacked and installed maldet-clean.tgz Feb 26 03:47:01 root maldet(27494): {sigup} signature set update completed Feb 26 03:47:01 root maldet(27494): {sigup} 17369 signatures (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 26 03:47:02 root maldet(27813): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 26 03:47:02 root maldet(27813): {scan} signatures loaded: 17369 (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 26 03:47:02 root maldet(27813): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 26 03:47:02 root maldet(27813): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 26 03:47:02 root maldet(27813): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 26 03:50:55 root maldet(27813): {scan} file list completed in 233s, found 3083 files... Feb 26 03:50:55 root maldet(27813): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 26 03:50:55 root maldet(27813): {scan} scan of (3083 files) in progress... Feb 26 03:56:08 root maldet(27813): {scan} scan completed on : files 3083, malware hits 0, cleaned hits 0, time 546s Feb 26 03:56:08 root maldet(27813): {scan} scan report saved, to view run: maldet --report 230226-0347.27813 Feb 27 03:10:15 root maldet(17151): {update} checking for available updates... Feb 27 03:10:15 root maldet(17151): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 27 03:10:15 root maldet(17151): {update} hashing install files and checking against server... Feb 27 03:10:15 root maldet(17151): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 27 03:10:15 root maldet(17151): {update} latest version already installed. Feb 27 03:10:16 root maldet(17294): {sigup} performing signature update check... Feb 27 03:10:16 root maldet(17294): {sigup} local signature set is version 202302251165796 Feb 27 03:10:16 root maldet(17294): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 27 03:10:16 root maldet(17294): {sigup} latest signature set already installed Feb 27 03:10:16 root maldet(17408): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 27 03:10:17 root maldet(17408): {scan} signatures loaded: 17369 (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 27 03:10:17 root maldet(17408): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 27 03:10:17 root maldet(17408): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 27 03:10:17 root maldet(17408): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 27 03:10:21 root maldet(17408): {scan} file list completed in 4s, found 108 files... Feb 27 03:10:21 root maldet(17408): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 27 03:10:21 root maldet(17408): {scan} scan of (108 files) in progress... Feb 27 03:10:35 root maldet(17408): {scan} scan completed on : files 108, malware hits 0, cleaned hits 0, time 19s Feb 27 03:10:35 root maldet(17408): {scan} scan report saved, to view run: maldet --report 230227-0310.17408 Feb 28 04:01:58 root maldet(8382): {update} checking for available updates... Feb 28 04:01:58 root maldet(8382): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 28 04:01:58 root maldet(8382): {update} hashing install files and checking against server... Feb 28 04:01:58 root maldet(8382): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 28 04:01:58 root maldet(8382): {update} latest version already installed. Feb 28 04:01:58 root maldet(8524): {sigup} performing signature update check... Feb 28 04:01:58 root maldet(8524): {sigup} local signature set is version 202302251165796 Feb 28 04:01:59 root maldet(8524): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 28 04:01:59 root maldet(8524): {sigup} latest signature set already installed Feb 28 04:01:59 root maldet(8637): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 28 04:01:59 root maldet(8637): {scan} signatures loaded: 17369 (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 28 04:01:59 root maldet(8637): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Feb 28 04:01:59 root maldet(8637): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 28 04:01:59 root maldet(8637): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/markpart/public_html/" "/home/matsassociates/public_html/" "/home/meetumathsmind/public_html/" "/home/meherast/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 28 04:02:03 root maldet(8637): {scan} file list completed in 4s, found 175 files... Feb 28 04:02:03 root maldet(8637): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 28 04:02:03 root maldet(8637): {scan} scan of (175 files) in progress... Feb 28 04:02:14 root maldet(8637): {scan} scan completed on : files 175, malware hits 0, cleaned hits 0, time 15s Feb 28 04:02:14 root maldet(8637): {scan} scan report saved, to view run: maldet --report 230228-0401.8637 Mar 01 03:47:37 root maldet(15359): {update} checking for available updates... Mar 01 03:47:38 root maldet(15359): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 01 03:47:38 root maldet(15359): {update} hashing install files and checking against server... Mar 01 03:47:38 root maldet(15359): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 01 03:47:38 root maldet(15359): {update} latest version already installed. Mar 01 03:47:39 root maldet(15505): {sigup} performing signature update check... Mar 01 03:47:39 root maldet(15505): {sigup} local signature set is version 202302251165796 Mar 01 03:47:39 root maldet(15505): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 01 03:47:39 root maldet(15505): {sigup} new signature set 202302281846546 available Mar 01 03:47:39 root maldet(15505): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 01 03:47:40 root maldet(15505): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 01 03:47:40 root maldet(15505): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 01 03:47:40 root maldet(15505): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 01 03:47:40 root maldet(15505): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 01 03:47:40 root maldet(15505): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 01 03:47:40 root maldet(15505): {sigup} verified md5sum of maldet-sigpack.tgz Mar 01 03:47:41 root maldet(15505): {sigup} unpacked and installed maldet-sigpack.tgz Mar 01 03:47:41 root maldet(15505): {sigup} verified md5sum of maldet-clean.tgz Mar 01 03:47:41 root maldet(15505): {sigup} unpacked and installed maldet-clean.tgz Mar 01 03:47:41 root maldet(15505): {sigup} signature set update completed Mar 01 03:47:42 root maldet(15505): {sigup} 17369 signatures (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 01 03:47:42 root maldet(15758): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 01 03:47:44 root maldet(15758): {scan} signatures loaded: 17369 (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 01 03:47:44 root maldet(15758): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 01 03:47:44 root maldet(15758): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 01 03:47:44 root maldet(15758): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 01 04:03:40 root maldet(15758): {scan} file list completed in 956s, found 6271 files... Mar 01 04:03:40 root maldet(15758): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 01 04:03:40 root maldet(15758): {scan} scan of (6271 files) in progress... Mar 01 04:06:04 root maldet(15758): {scan} scan completed on : files 6271, malware hits 0, cleaned hits 0, time 1102s Mar 01 04:06:04 root maldet(15758): {scan} scan report saved, to view run: maldet --report 230301-0347.15758 Mar 02 03:27:48 root maldet(1562): {update} checking for available updates... Mar 02 03:27:49 root maldet(1562): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 02 03:27:49 root maldet(1562): {update} hashing install files and checking against server... Mar 02 03:27:49 root maldet(1562): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 02 03:27:49 root maldet(1562): {update} latest version already installed. Mar 02 03:27:49 root maldet(1703): {sigup} performing signature update check... Mar 02 03:27:49 root maldet(1703): {sigup} local signature set is version 202302281846546 Mar 02 03:27:49 root maldet(1703): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 02 03:27:49 root maldet(1703): {sigup} latest signature set already installed Mar 02 03:27:49 root maldet(1824): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 02 03:27:50 root maldet(1824): {scan} signatures loaded: 17369 (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 02 03:27:50 root maldet(1824): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 02 03:27:50 root maldet(1824): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 02 03:27:50 root maldet(1824): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 02 03:27:54 root maldet(1824): {scan} file list completed in 4s, found 266 files... Mar 02 03:27:54 root maldet(1824): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 02 03:27:54 root maldet(1824): {scan} scan of (266 files) in progress... Mar 02 03:28:13 root maldet(1824): {scan} scan completed on : files 266, malware hits 0, cleaned hits 0, time 24s Mar 02 03:28:13 root maldet(1824): {scan} scan report saved, to view run: maldet --report 230302-0327.1824 Mar 03 03:27:58 root maldet(28253): {update} checking for available updates... Mar 03 03:27:58 root maldet(28253): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 03 03:27:58 root maldet(28253): {update} hashing install files and checking against server... Mar 03 03:27:59 root maldet(28253): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 03 03:27:59 root maldet(28253): {update} latest version already installed. Mar 03 03:27:59 root maldet(28400): {sigup} performing signature update check... Mar 03 03:27:59 root maldet(28400): {sigup} local signature set is version 202302281846546 Mar 03 03:27:59 root maldet(28400): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 03 03:27:59 root maldet(28400): {sigup} latest signature set already installed Mar 03 03:27:59 root maldet(28522): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 03 03:28:00 root maldet(28522): {scan} signatures loaded: 17369 (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 03 03:28:00 root maldet(28522): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 03 03:28:00 root maldet(28522): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 03 03:28:00 root maldet(28522): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 03 03:28:03 root maldet(28522): {scan} file list completed in 3s, found 6386 files... Mar 03 03:28:03 root maldet(28522): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 03 03:28:03 root maldet(28522): {scan} scan of (6386 files) in progress... Mar 03 03:29:06 root maldet(28522): {scan} scan completed on : files 6386, malware hits 0, cleaned hits 0, time 67s Mar 03 03:29:06 root maldet(28522): {scan} scan report saved, to view run: maldet --report 230303-0327.28522 Mar 04 03:37:13 root maldet(22038): {update} checking for available updates... Mar 04 03:37:13 root maldet(22038): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 04 03:37:13 root maldet(22038): {update} hashing install files and checking against server... Mar 04 03:37:14 root maldet(22038): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 04 03:37:14 root maldet(22038): {update} latest version already installed. Mar 04 03:37:14 root maldet(22172): {sigup} performing signature update check... Mar 04 03:37:14 root maldet(22172): {sigup} local signature set is version 202302281846546 Mar 04 03:37:14 root maldet(22172): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 04 03:37:14 root maldet(22172): {sigup} latest signature set already installed Mar 04 03:37:14 root maldet(22286): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 04 03:37:15 root maldet(22286): {scan} signatures loaded: 17369 (14532 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 04 03:37:15 root maldet(22286): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 04 03:37:15 root maldet(22286): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 04 03:37:15 root maldet(22286): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 04 03:37:18 root maldet(22286): {scan} file list completed in 3s, found 169 files... Mar 04 03:37:18 root maldet(22286): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 04 03:37:18 root maldet(22286): {scan} scan of (169 files) in progress... Mar 04 03:37:27 root maldet(22286): {scan} scan completed on : files 169, malware hits 0, cleaned hits 0, time 13s Mar 04 03:37:27 root maldet(22286): {scan} scan report saved, to view run: maldet --report 230304-0337.22286 Mar 05 03:32:37 root maldet(5179): {update} checking for available updates... Mar 05 03:32:37 root maldet(5179): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 05 03:32:37 root maldet(5179): {update} hashing install files and checking against server... Mar 05 03:32:38 root maldet(5179): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 05 03:32:38 root maldet(5179): {update} latest version already installed. Mar 05 03:32:38 root maldet(5341): {sigup} performing signature update check... Mar 05 03:32:38 root maldet(5341): {sigup} local signature set is version 202302281846546 Mar 05 03:32:39 root maldet(5341): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 05 03:32:39 root maldet(5341): {sigup} new signature set 20230304525983 available Mar 05 03:32:39 root maldet(5341): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 05 03:32:39 root maldet(5341): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 05 03:32:39 root maldet(5341): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 05 03:32:39 root maldet(5341): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 05 03:32:40 root maldet(5341): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 05 03:32:40 root maldet(5341): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 05 03:32:40 root maldet(5341): {sigup} verified md5sum of maldet-sigpack.tgz Mar 05 03:32:41 root maldet(5341): {sigup} unpacked and installed maldet-sigpack.tgz Mar 05 03:32:41 root maldet(5341): {sigup} verified md5sum of maldet-clean.tgz Mar 05 03:32:41 root maldet(5341): {sigup} unpacked and installed maldet-clean.tgz Mar 05 03:32:41 root maldet(5341): {sigup} signature set update completed Mar 05 03:32:41 root maldet(5341): {sigup} 17370 signatures (14533 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 05 03:32:41 root maldet(5605): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 05 03:32:44 root maldet(5605): {scan} signatures loaded: 17370 (14533 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 05 03:32:44 root maldet(5605): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 05 03:32:44 root maldet(5605): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 05 03:32:44 root maldet(5605): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 05 03:48:56 root maldet(5605): {scan} file list completed in 972s, found 131 files... Mar 05 03:48:56 root maldet(5605): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 05 03:48:56 root maldet(5605): {scan} scan of (131 files) in progress... Mar 05 03:49:36 root maldet(5605): {scan} scan completed on : files 131, malware hits 0, cleaned hits 0, time 1015s Mar 05 03:49:36 root maldet(5605): {scan} scan report saved, to view run: maldet --report 230305-0332.5605 Mar 06 03:26:21 root maldet(14859): {update} checking for available updates... Mar 06 03:26:21 root maldet(14859): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 06 03:26:21 root maldet(14859): {update} hashing install files and checking against server... Mar 06 03:26:21 root maldet(14859): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 06 03:26:21 root maldet(14859): {update} latest version already installed. Mar 06 03:26:22 root maldet(14999): {sigup} performing signature update check... Mar 06 03:26:22 root maldet(14999): {sigup} local signature set is version 20230304525983 Mar 06 03:26:22 root maldet(14999): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 06 03:26:22 root maldet(14999): {sigup} latest signature set already installed Mar 06 03:26:22 root maldet(15111): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 06 03:26:23 root maldet(15111): {scan} signatures loaded: 17370 (14533 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 06 03:26:23 root maldet(15111): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 06 03:26:23 root maldet(15111): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 06 03:26:23 root maldet(15111): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 06 03:26:27 root maldet(15111): {scan} file list completed in 4s, found 553 files... Mar 06 03:26:27 root maldet(15111): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 06 03:26:27 root maldet(15111): {scan} scan of (553 files) in progress... Mar 06 03:26:42 root maldet(15111): {scan} scan completed on : files 553, malware hits 0, cleaned hits 0, time 20s Mar 06 03:26:42 root maldet(15111): {scan} scan report saved, to view run: maldet --report 230306-0326.15111 Mar 07 03:40:41 root maldet(28879): {update} checking for available updates... Mar 07 03:40:41 root maldet(28879): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 07 03:40:41 root maldet(28879): {update} hashing install files and checking against server... Mar 07 03:40:42 root maldet(28879): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 07 03:40:42 root maldet(28879): {update} latest version already installed. Mar 07 03:40:42 root maldet(29016): {sigup} performing signature update check... Mar 07 03:40:42 root maldet(29016): {sigup} local signature set is version 20230304525983 Mar 07 03:40:42 root maldet(29016): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 07 03:40:42 root maldet(29016): {sigup} latest signature set already installed Mar 07 03:40:42 root maldet(29135): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 07 03:40:43 root maldet(29135): {scan} signatures loaded: 17370 (14533 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 07 03:40:43 root maldet(29135): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 07 03:40:43 root maldet(29135): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 07 03:40:43 root maldet(29135): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 07 03:40:46 root maldet(29135): {scan} file list completed in 3s, found 140 files... Mar 07 03:40:46 root maldet(29135): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 07 03:40:46 root maldet(29135): {scan} scan of (140 files) in progress... Mar 07 03:40:54 root maldet(29135): {scan} scan completed on : files 140, malware hits 0, cleaned hits 0, time 12s Mar 07 03:40:54 root maldet(29135): {scan} scan report saved, to view run: maldet --report 230307-0340.29135 Mar 08 03:53:37 root maldet(14603): {update} checking for available updates... Mar 08 03:53:38 root maldet(14603): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 08 03:53:38 root maldet(14603): {update} hashing install files and checking against server... Mar 08 03:53:38 root maldet(14603): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 08 03:53:38 root maldet(14603): {update} latest version already installed. Mar 08 03:53:39 root maldet(14772): {sigup} performing signature update check... Mar 08 03:53:39 root maldet(14772): {sigup} local signature set is version 20230304525983 Mar 08 03:53:39 root maldet(14772): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 08 03:53:40 root maldet(14772): {sigup} new signature set 202303071205937 available Mar 08 03:53:40 root maldet(14772): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 08 03:53:40 root maldet(14772): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 08 03:53:40 root maldet(14772): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 08 03:53:40 root maldet(14772): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 08 03:53:40 root maldet(14772): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 08 03:53:40 root maldet(14772): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 08 03:53:40 root maldet(14772): {sigup} verified md5sum of maldet-sigpack.tgz Mar 08 03:53:41 root maldet(14772): {sigup} unpacked and installed maldet-sigpack.tgz Mar 08 03:53:41 root maldet(14772): {sigup} verified md5sum of maldet-clean.tgz Mar 08 03:53:41 root maldet(14772): {sigup} unpacked and installed maldet-clean.tgz Mar 08 03:53:41 root maldet(14772): {sigup} signature set update completed Mar 08 03:53:41 root maldet(14772): {sigup} 17370 signatures (14533 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 08 03:53:42 root maldet(15042): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 08 03:53:43 root maldet(15042): {scan} signatures loaded: 17370 (14533 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 08 03:53:43 root maldet(15042): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 08 03:53:43 root maldet(15042): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 08 03:53:43 root maldet(15042): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 08 03:56:27 root maldet(15042): {scan} file list completed in 163s, found 153 files... Mar 08 03:56:27 root maldet(15042): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 08 03:56:27 root maldet(15042): {scan} scan of (153 files) in progress... Mar 08 03:56:55 root maldet(15042): {scan} scan completed on : files 153, malware hits 0, cleaned hits 0, time 193s Mar 08 03:56:55 root maldet(15042): {scan} scan report saved, to view run: maldet --report 230308-0353.15042 Mar 09 03:50:38 root maldet(10927): {update} checking for available updates... Mar 09 03:50:39 root maldet(10927): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 09 03:50:39 root maldet(10927): {update} hashing install files and checking against server... Mar 09 03:50:39 root maldet(10927): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 09 03:50:39 root maldet(10927): {update} latest version already installed. Mar 09 03:50:39 root maldet(11081): {sigup} performing signature update check... Mar 09 03:50:39 root maldet(11081): {sigup} local signature set is version 202303071205937 Mar 09 03:50:40 root maldet(11081): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 09 03:50:40 root maldet(11081): {sigup} latest signature set already installed Mar 09 03:50:40 root maldet(11201): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 09 03:50:42 root maldet(11201): {scan} signatures loaded: 17370 (14533 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 09 03:50:42 root maldet(11201): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 09 03:50:42 root maldet(11201): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 09 03:50:42 root maldet(11201): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 09 04:09:04 root maldet(11201): {scan} file list completed in 1102s, found 125 files... Mar 09 04:09:04 root maldet(11201): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 09 04:09:04 root maldet(11201): {scan} scan of (125 files) in progress... Mar 09 04:09:44 root maldet(11201): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Mar 09 04:09:44 root maldet(11201): {scan} scan completed on : files 125, malware hits 0, cleaned hits 0, time 1144s Mar 09 04:09:44 root maldet(11201): {scan} scan report saved, to view run: maldet --report 230309-0350.11201 Mar 10 03:58:07 root maldet(11794): {update} checking for available updates... Mar 10 03:58:07 root maldet(11794): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 10 03:58:07 root maldet(11794): {update} hashing install files and checking against server... Mar 10 03:58:07 root maldet(11794): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 10 03:58:07 root maldet(11794): {update} latest version already installed. Mar 10 03:58:08 root maldet(11932): {sigup} performing signature update check... Mar 10 03:58:08 root maldet(11932): {sigup} local signature set is version 202303071205937 Mar 10 03:58:08 root maldet(11932): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 10 03:58:08 root maldet(11932): {sigup} latest signature set already installed Mar 10 03:58:08 root maldet(12058): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 10 03:58:09 root maldet(12058): {scan} signatures loaded: 17370 (14533 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 10 03:58:09 root maldet(12058): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 10 03:58:09 root maldet(12058): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 10 03:58:09 root maldet(12058): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 10 03:58:13 root maldet(12058): {scan} file list completed in 4s, found 8067 files... Mar 10 03:58:13 root maldet(12058): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 10 03:58:13 root maldet(12058): {scan} scan of (8067 files) in progress... Mar 10 04:02:10 root maldet(12058): {scan} scan completed on : files 8067, malware hits 0, cleaned hits 0, time 242s Mar 10 04:02:10 root maldet(12058): {scan} scan report saved, to view run: maldet --report 230310-0358.12058 Mar 11 03:19:13 root maldet(32474): {update} checking for available updates... Mar 11 03:19:13 root maldet(32474): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 11 03:19:13 root maldet(32474): {update} hashing install files and checking against server... Mar 11 03:19:13 root maldet(32474): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 11 03:19:13 root maldet(32474): {update} latest version already installed. Mar 11 03:19:14 root maldet(32618): {sigup} performing signature update check... Mar 11 03:19:14 root maldet(32618): {sigup} local signature set is version 202303071205937 Mar 11 03:19:14 root maldet(32618): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 11 03:19:14 root maldet(32618): {sigup} new signature set 202303101885766 available Mar 11 03:19:14 root maldet(32618): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 11 03:19:14 root maldet(32618): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 11 03:19:14 root maldet(32618): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 11 03:19:14 root maldet(32618): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 11 03:19:15 root maldet(32618): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 11 03:19:15 root maldet(32618): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 11 03:19:15 root maldet(32618): {sigup} verified md5sum of maldet-sigpack.tgz Mar 11 03:19:15 root maldet(32618): {sigup} unpacked and installed maldet-sigpack.tgz Mar 11 03:19:15 root maldet(32618): {sigup} verified md5sum of maldet-clean.tgz Mar 11 03:19:15 root maldet(32618): {sigup} unpacked and installed maldet-clean.tgz Mar 11 03:19:15 root maldet(32618): {sigup} signature set update completed Mar 11 03:19:15 root maldet(32618): {sigup} 17370 signatures (14533 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 11 03:19:15 root maldet(434): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 11 03:19:15 root maldet(434): {scan} signatures loaded: 17370 (14533 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 11 03:19:15 root maldet(434): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 11 03:19:15 root maldet(434): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 11 03:19:15 root maldet(434): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 11 03:19:19 root maldet(434): {scan} file list completed in 4s, found 1139 files... Mar 11 03:19:19 root maldet(434): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 11 03:19:19 root maldet(434): {scan} scan of (1139 files) in progress... Mar 11 03:20:08 root maldet(434): {scan} scan completed on : files 1139, malware hits 0, cleaned hits 0, time 53s Mar 11 03:20:08 root maldet(434): {scan} scan report saved, to view run: maldet --report 230311-0319.434 Mar 12 03:52:57 root maldet(23291): {update} checking for available updates... Mar 12 03:52:58 root maldet(23291): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 12 03:52:58 root maldet(23291): {update} hashing install files and checking against server... Mar 12 03:52:58 root maldet(23291): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 12 03:52:58 root maldet(23291): {update} latest version already installed. Mar 12 03:52:59 root maldet(23471): {sigup} performing signature update check... Mar 12 03:52:59 root maldet(23471): {sigup} local signature set is version 202303101885766 Mar 12 03:53:00 root maldet(23471): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 12 03:53:01 root maldet(23471): {sigup} latest signature set already installed Mar 12 03:53:03 root maldet(23622): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 12 03:53:04 root maldet(23622): {scan} signatures loaded: 17370 (14533 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 12 03:53:04 root maldet(23622): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 12 03:53:04 root maldet(23622): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 12 03:53:04 root maldet(23622): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 12 04:00:55 root maldet(23622): {scan} file list completed in 471s, found 199 files... Mar 12 04:00:55 root maldet(23622): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 12 04:00:55 root maldet(23622): {scan} scan of (199 files) in progress... Mar 12 04:01:37 root maldet(23622): {scan} scan completed on : files 199, malware hits 0, cleaned hits 0, time 513s Mar 12 04:01:37 root maldet(23622): {scan} scan report saved, to view run: maldet --report 230312-0353.23622 Mar 13 03:40:43 root maldet(23798): {update} checking for available updates... Mar 13 03:40:43 root maldet(23798): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 13 03:40:43 root maldet(23798): {update} hashing install files and checking against server... Mar 13 03:40:43 root maldet(23798): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 13 03:40:43 root maldet(23798): {update} latest version already installed. Mar 13 03:40:44 root maldet(23964): {sigup} performing signature update check... Mar 13 03:40:44 root maldet(23964): {sigup} local signature set is version 202303101885766 Mar 13 03:40:44 root maldet(23964): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 13 03:40:44 root maldet(23964): {sigup} latest signature set already installed Mar 13 03:40:45 root maldet(24080): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 13 03:40:46 root maldet(24080): {scan} signatures loaded: 17370 (14533 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 13 03:40:46 root maldet(24080): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 13 03:40:46 root maldet(24080): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 13 03:40:46 root maldet(24080): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 13 04:00:49 root maldet(24080): {scan} file list completed in 1203s, found 154 files... Mar 13 04:00:49 root maldet(24080): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 13 04:00:49 root maldet(24080): {scan} scan of (154 files) in progress... Mar 13 04:01:20 root maldet(24080): {scan} scan completed on : files 154, malware hits 0, cleaned hits 0, time 1235s Mar 13 04:01:20 root maldet(24080): {scan} scan report saved, to view run: maldet --report 230313-0340.24080 Mar 14 03:32:16 root maldet(29779): {update} checking for available updates... Mar 14 03:32:16 root maldet(29779): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 14 03:32:16 root maldet(29779): {update} hashing install files and checking against server... Mar 14 03:32:17 root maldet(29779): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 14 03:32:17 root maldet(29779): {update} latest version already installed. Mar 14 03:32:17 root maldet(29925): {sigup} performing signature update check... Mar 14 03:32:17 root maldet(29925): {sigup} local signature set is version 202303101885766 Mar 14 03:32:17 root maldet(29925): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 14 03:32:17 root maldet(29925): {sigup} new signature set 20230313470079 available Mar 14 03:32:17 root maldet(29925): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 14 03:32:17 root maldet(29925): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 14 03:32:18 root maldet(29925): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 14 03:32:18 root maldet(29925): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 14 03:32:18 root maldet(29925): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 14 03:32:18 root maldet(29925): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 14 03:32:18 root maldet(29925): {sigup} verified md5sum of maldet-sigpack.tgz Mar 14 03:32:18 root maldet(29925): {sigup} unpacked and installed maldet-sigpack.tgz Mar 14 03:32:18 root maldet(29925): {sigup} verified md5sum of maldet-clean.tgz Mar 14 03:32:18 root maldet(29925): {sigup} unpacked and installed maldet-clean.tgz Mar 14 03:32:18 root maldet(29925): {sigup} signature set update completed Mar 14 03:32:18 root maldet(29925): {sigup} 17370 signatures (14533 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 14 03:32:18 root maldet(30172): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 14 03:32:19 root maldet(30172): {scan} signatures loaded: 17370 (14533 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 14 03:32:19 root maldet(30172): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 14 03:32:19 root maldet(30172): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 14 03:32:19 root maldet(30172): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 14 03:32:23 root maldet(30172): {scan} file list completed in 4s, found 21254 files... Mar 14 03:32:23 root maldet(30172): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 14 03:32:23 root maldet(30172): {scan} scan of (21254 files) in progress... Mar 14 03:36:47 root maldet(30172): {scan} scan completed on : files 21254, malware hits 0, cleaned hits 0, time 269s Mar 14 03:36:47 root maldet(30172): {scan} scan report saved, to view run: maldet --report 230314-0332.30172 Mar 15 03:31:14 root maldet(13896): {update} checking for available updates... Mar 15 03:31:14 root maldet(13896): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 15 03:31:14 root maldet(13896): {update} hashing install files and checking against server... Mar 15 03:31:15 root maldet(13896): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 15 03:31:15 root maldet(13896): {update} latest version already installed. Mar 15 03:31:16 root maldet(14054): {sigup} performing signature update check... Mar 15 03:31:16 root maldet(14054): {sigup} local signature set is version 20230313470079 Mar 15 03:31:17 root maldet(14054): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 15 03:31:17 root maldet(14054): {sigup} latest signature set already installed Mar 15 03:31:18 root maldet(14195): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 15 03:31:19 root maldet(14195): {scan} signatures loaded: 17370 (14533 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 15 03:31:19 root maldet(14195): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 15 03:31:19 root maldet(14195): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 15 03:31:19 root maldet(14195): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 15 03:32:53 root maldet(14195): {scan} file list completed in 94s, found 218 files... Mar 15 03:32:53 root maldet(14195): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 15 03:32:53 root maldet(14195): {scan} scan of (218 files) in progress... Mar 15 03:33:24 root maldet(14195): {scan} scan completed on : files 218, malware hits 0, cleaned hits 0, time 126s Mar 15 03:33:24 root maldet(14195): {scan} scan report saved, to view run: maldet --report 230315-0331.14195 Mar 16 03:18:11 root maldet(6381): {update} checking for available updates... Mar 16 03:18:11 root maldet(6381): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 16 03:18:11 root maldet(6381): {update} hashing install files and checking against server... Mar 16 03:18:12 root maldet(6381): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 16 03:18:12 root maldet(6381): {update} latest version already installed. Mar 16 03:18:12 root maldet(6526): {sigup} performing signature update check... Mar 16 03:18:12 root maldet(6526): {sigup} local signature set is version 20230313470079 Mar 16 03:18:12 root maldet(6526): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 16 03:18:12 root maldet(6526): {sigup} latest signature set already installed Mar 16 03:18:12 root maldet(6643): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 16 03:18:14 root maldet(6643): {scan} signatures loaded: 17370 (14533 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 16 03:18:14 root maldet(6643): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 16 03:18:14 root maldet(6643): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 16 03:18:14 root maldet(6643): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 16 03:28:39 root maldet(6643): {scan} file list completed in 625s, found 1095 files... Mar 16 03:28:39 root maldet(6643): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 16 03:28:39 root maldet(6643): {scan} scan of (1095 files) in progress... Mar 16 03:29:47 root maldet(6643): {scan} scan completed on : files 1095, malware hits 0, cleaned hits 0, time 695s Mar 16 03:29:47 root maldet(6643): {scan} scan report saved, to view run: maldet --report 230316-0318.6643 Mar 17 03:17:46 root maldet(19691): {update} checking for available updates... Mar 17 03:17:46 root maldet(19691): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 17 03:17:46 root maldet(19691): {update} hashing install files and checking against server... Mar 17 03:17:47 root maldet(19691): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 17 03:17:47 root maldet(19691): {update} latest version already installed. Mar 17 03:17:47 root maldet(19826): {sigup} performing signature update check... Mar 17 03:17:47 root maldet(19826): {sigup} local signature set is version 20230313470079 Mar 17 03:17:47 root maldet(19826): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 17 03:17:47 root maldet(19826): {sigup} new signature set 202303161151243 available Mar 17 03:17:47 root maldet(19826): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 17 03:17:48 root maldet(19826): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 17 03:17:48 root maldet(19826): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 17 03:17:48 root maldet(19826): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 17 03:17:48 root maldet(19826): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 17 03:17:48 root maldet(19826): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 17 03:17:49 root maldet(19826): {sigup} verified md5sum of maldet-sigpack.tgz Mar 17 03:17:49 root maldet(19826): {sigup} unpacked and installed maldet-sigpack.tgz Mar 17 03:17:49 root maldet(19826): {sigup} verified md5sum of maldet-clean.tgz Mar 17 03:17:49 root maldet(19826): {sigup} unpacked and installed maldet-clean.tgz Mar 17 03:17:49 root maldet(19826): {sigup} signature set update completed Mar 17 03:17:49 root maldet(19826): {sigup} 17370 signatures (14533 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 17 03:17:49 root maldet(20074): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 17 03:17:50 root maldet(20074): {scan} signatures loaded: 17370 (14533 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 17 03:17:50 root maldet(20074): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 17 03:17:50 root maldet(20074): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 17 03:17:50 root maldet(20074): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 17 03:17:54 root maldet(20074): {scan} file list completed in 4s, found 13404 files... Mar 17 03:17:54 root maldet(20074): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 17 03:17:54 root maldet(20074): {scan} scan of (13404 files) in progress... Mar 17 03:20:21 root maldet(20074): {scan} scan completed on : files 13404, malware hits 0, cleaned hits 0, time 152s Mar 17 03:20:21 root maldet(20074): {scan} scan report saved, to view run: maldet --report 230317-0317.20074 Mar 18 03:49:24 root maldet(17428): {update} checking for available updates... Mar 18 03:49:24 root maldet(17428): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 18 03:49:24 root maldet(17428): {update} hashing install files and checking against server... Mar 18 03:49:25 root maldet(17428): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 18 03:49:25 root maldet(17428): {update} latest version already installed. Mar 18 03:49:25 root maldet(17565): {sigup} performing signature update check... Mar 18 03:49:25 root maldet(17565): {sigup} local signature set is version 202303161151243 Mar 18 03:49:25 root maldet(17565): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 18 03:49:25 root maldet(17565): {sigup} latest signature set already installed Mar 18 03:49:25 root maldet(17686): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 18 03:49:26 root maldet(17686): {scan} signatures loaded: 17370 (14533 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 18 03:49:26 root maldet(17686): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 18 03:49:26 root maldet(17686): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 18 03:49:26 root maldet(17686): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 18 03:49:30 root maldet(17686): {scan} file list completed in 4s, found 223 files... Mar 18 03:49:30 root maldet(17686): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 18 03:49:30 root maldet(17686): {scan} scan of (223 files) in progress... Mar 18 03:49:36 root maldet(17686): {scan} scan completed on : files 223, malware hits 0, cleaned hits 0, time 11s Mar 18 03:49:36 root maldet(17686): {scan} scan report saved, to view run: maldet --report 230318-0349.17686 Mar 19 03:14:02 root maldet(28659): {update} checking for available updates... Mar 19 03:14:02 root maldet(28659): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 19 03:14:02 root maldet(28659): {update} hashing install files and checking against server... Mar 19 03:14:02 root maldet(28659): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 19 03:14:02 root maldet(28659): {update} latest version already installed. Mar 19 03:14:03 root maldet(28827): {sigup} performing signature update check... Mar 19 03:14:03 root maldet(28827): {sigup} local signature set is version 202303161151243 Mar 19 03:14:03 root maldet(28827): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 19 03:14:03 root maldet(28827): {sigup} latest signature set already installed Mar 19 03:14:04 root maldet(28944): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 19 03:14:04 root maldet(28944): {scan} signatures loaded: 17370 (14533 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 19 03:14:04 root maldet(28944): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 19 03:14:04 root maldet(28944): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 19 03:14:04 root maldet(28944): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 19 03:15:29 root maldet(28944): {scan} file list completed in 85s, found 111 files... Mar 19 03:15:29 root maldet(28944): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 19 03:15:29 root maldet(28944): {scan} scan of (111 files) in progress... Mar 19 03:15:55 root maldet(28944): {scan} scan completed on : files 111, malware hits 0, cleaned hits 0, time 111s Mar 19 03:15:55 root maldet(28944): {scan} scan report saved, to view run: maldet --report 230319-0314.28944 Mar 20 03:52:49 root maldet(4148): {update} checking for available updates... Mar 20 03:52:49 root maldet(4148): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 20 03:52:49 root maldet(4148): {update} hashing install files and checking against server... Mar 20 03:52:50 root maldet(4148): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 20 03:52:50 root maldet(4148): {update} latest version already installed. Mar 20 03:52:50 root maldet(4306): {sigup} performing signature update check... Mar 20 03:52:50 root maldet(4306): {sigup} local signature set is version 202303161151243 Mar 20 03:52:50 root maldet(4306): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 20 03:52:50 root maldet(4306): {sigup} new signature set 20230319504983 available Mar 20 03:52:50 root maldet(4306): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 20 03:52:50 root maldet(4306): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 20 03:52:51 root maldet(4306): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 20 03:52:51 root maldet(4306): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 20 03:52:51 root maldet(4306): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 20 03:52:51 root maldet(4306): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 20 03:52:51 root maldet(4306): {sigup} verified md5sum of maldet-sigpack.tgz Mar 20 03:52:51 root maldet(4306): {sigup} unpacked and installed maldet-sigpack.tgz Mar 20 03:52:52 root maldet(4306): {sigup} verified md5sum of maldet-clean.tgz Mar 20 03:52:52 root maldet(4306): {sigup} unpacked and installed maldet-clean.tgz Mar 20 03:52:52 root maldet(4306): {sigup} signature set update completed Mar 20 03:52:52 root maldet(4306): {sigup} 17370 signatures (14533 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 20 03:52:52 root maldet(4560): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 20 03:52:52 root maldet(4560): {scan} signatures loaded: 17370 (14533 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 20 03:52:52 root maldet(4560): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 20 03:52:52 root maldet(4560): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 20 03:52:52 root maldet(4560): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 20 03:54:22 root maldet(4560): {scan} file list completed in 90s, found 143 files... Mar 20 03:54:22 root maldet(4560): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 20 03:54:22 root maldet(4560): {scan} scan of (143 files) in progress... Mar 20 03:54:43 root maldet(4560): {scan} scan completed on : files 143, malware hits 0, cleaned hits 0, time 111s Mar 20 03:54:43 root maldet(4560): {scan} scan report saved, to view run: maldet --report 230320-0352.4560 Mar 21 03:12:11 root maldet(3028): {update} checking for available updates... Mar 21 03:12:12 root maldet(3028): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 21 03:12:12 root maldet(3028): {update} hashing install files and checking against server... Mar 21 03:12:12 root maldet(3028): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 21 03:12:12 root maldet(3028): {update} latest version already installed. Mar 21 03:12:12 root maldet(3169): {sigup} performing signature update check... Mar 21 03:12:12 root maldet(3169): {sigup} local signature set is version 20230319504983 Mar 21 03:12:12 root maldet(3169): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 21 03:12:12 root maldet(3169): {sigup} latest signature set already installed Mar 21 03:12:13 root maldet(3283): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 21 03:12:13 root maldet(3283): {scan} signatures loaded: 17370 (14533 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 21 03:12:13 root maldet(3283): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 21 03:12:13 root maldet(3283): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 21 03:12:13 root maldet(3283): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 21 03:12:17 root maldet(3283): {scan} file list completed in 4s, found 130 files... Mar 21 03:12:17 root maldet(3283): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 21 03:12:17 root maldet(3283): {scan} scan of (130 files) in progress... Mar 21 03:12:25 root maldet(3283): {scan} scan completed on : files 130, malware hits 0, cleaned hits 0, time 12s Mar 21 03:12:25 root maldet(3283): {scan} scan report saved, to view run: maldet --report 230321-0312.3283 Mar 22 04:04:21 root maldet(30512): {update} checking for available updates... Mar 22 04:04:23 root maldet(30512): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 22 04:04:23 root maldet(30512): {update} hashing install files and checking against server... Mar 22 04:04:23 root maldet(30512): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 22 04:04:23 root maldet(30512): {update} latest version already installed. Mar 22 04:04:24 root maldet(30662): {sigup} performing signature update check... Mar 22 04:04:24 root maldet(30662): {sigup} local signature set is version 20230319504983 Mar 22 04:04:24 root maldet(30662): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 22 04:04:25 root maldet(30662): {sigup} latest signature set already installed Mar 22 04:04:26 root maldet(30779): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 22 04:04:28 root maldet(30779): {scan} signatures loaded: 17370 (14533 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 22 04:04:28 root maldet(30779): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 22 04:04:28 root maldet(30779): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 22 04:04:28 root maldet(30779): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 22 04:27:58 root maldet(30779): {scan} file list completed in 1410s, found 8064 files... Mar 22 04:27:58 root maldet(30779): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 22 04:27:58 root maldet(30779): {scan} scan of (8064 files) in progress... Mar 22 04:34:35 root maldet(30779): {scan} scan completed on : files 8064, malware hits 0, cleaned hits 0, time 1808s Mar 22 04:34:35 root maldet(30779): {scan} scan report saved, to view run: maldet --report 230322-0404.30779 Mar 23 03:57:12 root maldet(1628): {update} checking for available updates... Mar 23 03:57:13 root maldet(1628): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 23 03:57:13 root maldet(1628): {update} hashing install files and checking against server... Mar 23 03:57:13 root maldet(1628): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 23 03:57:13 root maldet(1628): {update} latest version already installed. Mar 23 03:57:13 root maldet(1781): {sigup} performing signature update check... Mar 23 03:57:13 root maldet(1781): {sigup} local signature set is version 20230319504983 Mar 23 03:57:13 root maldet(1781): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 23 03:57:14 root maldet(1781): {sigup} new signature set 202303221187589 available Mar 23 03:57:14 root maldet(1781): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 23 03:57:14 root maldet(1781): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 23 03:57:14 root maldet(1781): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 23 03:57:14 root maldet(1781): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 23 03:57:14 root maldet(1781): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 23 03:57:15 root maldet(1781): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 23 03:57:15 root maldet(1781): {sigup} verified md5sum of maldet-sigpack.tgz Mar 23 03:57:15 root maldet(1781): {sigup} unpacked and installed maldet-sigpack.tgz Mar 23 03:57:15 root maldet(1781): {sigup} verified md5sum of maldet-clean.tgz Mar 23 03:57:15 root maldet(1781): {sigup} unpacked and installed maldet-clean.tgz Mar 23 03:57:15 root maldet(1781): {sigup} signature set update completed Mar 23 03:57:15 root maldet(1781): {sigup} 17370 signatures (14533 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 23 03:57:15 root maldet(2037): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 23 03:57:16 root maldet(2037): {scan} signatures loaded: 17370 (14533 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 23 03:57:16 root maldet(2037): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 23 03:57:16 root maldet(2037): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 23 03:57:16 root maldet(2037): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 23 03:57:21 root maldet(2037): {scan} file list completed in 5s, found 1221 files... Mar 23 03:57:21 root maldet(2037): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 23 03:57:21 root maldet(2037): {scan} scan of (1221 files) in progress... Mar 23 03:58:17 root maldet(2037): {scan} scan completed on : files 1221, malware hits 0, cleaned hits 0, time 62s Mar 23 03:58:17 root maldet(2037): {scan} scan report saved, to view run: maldet --report 230323-0357.2037 Mar 24 03:52:39 root maldet(14596): {update} checking for available updates... Mar 24 03:52:39 root maldet(14596): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 24 03:52:39 root maldet(14596): {update} hashing install files and checking against server... Mar 24 03:52:39 root maldet(14596): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 24 03:52:39 root maldet(14596): {update} latest version already installed. Mar 24 03:52:39 root maldet(14731): {sigup} performing signature update check... Mar 24 03:52:39 root maldet(14731): {sigup} local signature set is version 202303221187589 Mar 24 03:52:40 root maldet(14731): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 24 03:52:40 root maldet(14731): {sigup} latest signature set already installed Mar 24 03:52:40 root maldet(14843): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 24 03:52:40 root maldet(14843): {scan} signatures loaded: 17370 (14533 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 24 03:52:40 root maldet(14843): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 24 03:52:40 root maldet(14843): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 24 03:52:40 root maldet(14843): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 24 03:52:44 root maldet(14843): {scan} file list completed in 4s, found 300 files... Mar 24 03:52:44 root maldet(14843): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 24 03:52:44 root maldet(14843): {scan} scan of (300 files) in progress... Mar 24 03:52:57 root maldet(14843): {scan} scan completed on : files 300, malware hits 0, cleaned hits 0, time 17s Mar 24 03:52:57 root maldet(14843): {scan} scan report saved, to view run: maldet --report 230324-0352.14843 Mar 25 03:35:14 root maldet(19119): {update} checking for available updates... Mar 25 03:35:15 root maldet(19119): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 25 03:35:15 root maldet(19119): {update} hashing install files and checking against server... Mar 25 03:35:15 root maldet(19119): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 25 03:35:15 root maldet(19119): {update} latest version already installed. Mar 25 03:35:15 root maldet(19253): {sigup} performing signature update check... Mar 25 03:35:15 root maldet(19253): {sigup} local signature set is version 202303221187589 Mar 25 03:35:15 root maldet(19253): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 25 03:35:15 root maldet(19253): {sigup} latest signature set already installed Mar 25 03:35:16 root maldet(19365): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 25 03:35:16 root maldet(19365): {scan} signatures loaded: 17370 (14533 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 25 03:35:16 root maldet(19365): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 25 03:35:16 root maldet(19365): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 25 03:35:16 root maldet(19365): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 25 03:35:20 root maldet(19365): {scan} file list completed in 4s, found 233 files... Mar 25 03:35:20 root maldet(19365): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 25 03:35:20 root maldet(19365): {scan} scan of (233 files) in progress... Mar 25 03:35:28 root maldet(19365): {scan} scan completed on : files 233, malware hits 0, cleaned hits 0, time 12s Mar 25 03:35:28 root maldet(19365): {scan} scan report saved, to view run: maldet --report 230325-0335.19365 Mar 26 03:58:07 root maldet(18129): {update} checking for available updates... Mar 26 03:58:07 root maldet(18129): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 26 03:58:07 root maldet(18129): {update} hashing install files and checking against server... Mar 26 03:58:08 root maldet(18129): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 26 03:58:08 root maldet(18129): {update} latest version already installed. Mar 26 03:58:08 root maldet(18303): {sigup} performing signature update check... Mar 26 03:58:08 root maldet(18303): {sigup} local signature set is version 202303221187589 Mar 26 03:58:08 root maldet(18303): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 26 03:58:09 root maldet(18303): {sigup} new signature set 202303251868121 available Mar 26 03:58:09 root maldet(18303): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 26 03:58:09 root maldet(18303): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 26 03:58:10 root maldet(18303): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 26 03:58:10 root maldet(18303): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 26 03:58:10 root maldet(18303): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 26 03:58:10 root maldet(18303): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 26 03:58:10 root maldet(18303): {sigup} verified md5sum of maldet-sigpack.tgz Mar 26 03:58:13 root maldet(18303): {sigup} unpacked and installed maldet-sigpack.tgz Mar 26 03:58:13 root maldet(18303): {sigup} verified md5sum of maldet-clean.tgz Mar 26 03:58:13 root maldet(18303): {sigup} unpacked and installed maldet-clean.tgz Mar 26 03:58:13 root maldet(18303): {sigup} signature set update completed Mar 26 03:58:13 root maldet(18303): {sigup} 17371 signatures (14534 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 26 03:58:15 root maldet(18560): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 26 03:58:17 root maldet(18560): {scan} signatures loaded: 17371 (14534 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 26 03:58:17 root maldet(18560): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 26 03:58:17 root maldet(18560): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 26 03:58:17 root maldet(18560): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 26 04:06:00 root maldet(18560): {scan} file list completed in 463s, found 266 files... Mar 26 04:06:00 root maldet(18560): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 26 04:06:00 root maldet(18560): {scan} scan of (266 files) in progress... Mar 26 04:06:43 root maldet(18560): {scan} scan completed on : files 266, malware hits 0, cleaned hits 0, time 508s Mar 26 04:06:43 root maldet(18560): {scan} scan report saved, to view run: maldet --report 230326-0358.18560 Mar 27 03:47:37 root maldet(1922): {update} checking for available updates... Mar 27 03:47:37 root maldet(1922): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 27 03:47:37 root maldet(1922): {update} hashing install files and checking against server... Mar 27 03:47:38 root maldet(1922): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 27 03:47:38 root maldet(1922): {update} latest version already installed. Mar 27 03:47:39 root maldet(2072): {sigup} performing signature update check... Mar 27 03:47:39 root maldet(2072): {sigup} local signature set is version 202303251868121 Mar 27 03:47:39 root maldet(2072): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 27 03:47:39 root maldet(2072): {sigup} latest signature set already installed Mar 27 03:47:39 root maldet(2189): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 27 03:47:40 root maldet(2189): {scan} signatures loaded: 17371 (14534 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 27 03:47:40 root maldet(2189): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 27 03:47:40 root maldet(2189): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 27 03:47:40 root maldet(2189): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 27 03:47:44 root maldet(2189): {scan} file list completed in 4s, found 133 files... Mar 27 03:47:44 root maldet(2189): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 27 03:47:44 root maldet(2189): {scan} scan of (133 files) in progress... Mar 27 03:47:54 root maldet(2189): {scan} scan completed on : files 133, malware hits 0, cleaned hits 0, time 15s Mar 27 03:47:54 root maldet(2189): {scan} scan report saved, to view run: maldet --report 230327-0347.2189 Mar 28 03:21:19 root maldet(14541): {update} checking for available updates... Mar 28 03:21:20 root maldet(14541): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 28 03:21:20 root maldet(14541): {update} hashing install files and checking against server... Mar 28 03:21:20 root maldet(14541): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 28 03:21:20 root maldet(14541): {update} latest version already installed. Mar 28 03:21:20 root maldet(14681): {sigup} performing signature update check... Mar 28 03:21:20 root maldet(14681): {sigup} local signature set is version 202303251868121 Mar 28 03:21:20 root maldet(14681): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 28 03:21:20 root maldet(14681): {sigup} latest signature set already installed Mar 28 03:21:21 root maldet(14797): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 28 03:21:21 root maldet(14797): {scan} signatures loaded: 17371 (14534 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 28 03:21:21 root maldet(14797): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 28 03:21:21 root maldet(14797): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 28 03:21:21 root maldet(14797): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 28 03:21:25 root maldet(14797): {scan} file list completed in 4s, found 3486 files... Mar 28 03:21:25 root maldet(14797): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 28 03:21:25 root maldet(14797): {scan} scan of (3486 files) in progress... Mar 28 03:22:39 root maldet(14797): {scan} scan completed on : files 3486, malware hits 0, cleaned hits 0, time 78s Mar 28 03:22:39 root maldet(14797): {scan} scan report saved, to view run: maldet --report 230328-0321.14797 Mar 29 03:51:12 root maldet(22008): {update} checking for available updates... Mar 29 03:51:12 root maldet(22008): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 29 03:51:12 root maldet(22008): {update} hashing install files and checking against server... Mar 29 03:51:13 root maldet(22008): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 29 03:51:13 root maldet(22008): {update} latest version already installed. Mar 29 03:51:13 root maldet(22154): {sigup} performing signature update check... Mar 29 03:51:13 root maldet(22154): {sigup} local signature set is version 202303251868121 Mar 29 03:51:13 root maldet(22154): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 29 03:51:14 root maldet(22154): {sigup} new signature set 202303283084888 available Mar 29 03:51:14 root maldet(22154): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 29 03:51:15 root maldet(22154): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 29 03:51:15 root maldet(22154): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 29 03:51:15 root maldet(22154): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 29 03:51:15 root maldet(22154): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 29 03:51:15 root maldet(22154): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 29 03:51:15 root maldet(22154): {sigup} verified md5sum of maldet-sigpack.tgz Mar 29 03:51:20 root maldet(22154): {sigup} unpacked and installed maldet-sigpack.tgz Mar 29 03:51:20 root maldet(22154): {sigup} verified md5sum of maldet-clean.tgz Mar 29 03:51:20 root maldet(22154): {sigup} unpacked and installed maldet-clean.tgz Mar 29 03:51:20 root maldet(22154): {sigup} signature set update completed Mar 29 03:51:20 root maldet(22154): {sigup} 17371 signatures (14534 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 29 03:51:21 root maldet(22429): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 29 03:51:23 root maldet(22429): {scan} signatures loaded: 17371 (14534 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 29 03:51:23 root maldet(22429): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 29 03:51:23 root maldet(22429): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 29 03:51:23 root maldet(22429): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 29 04:06:26 root maldet(22429): {scan} file list completed in 903s, found 6038 files... Mar 29 04:06:26 root maldet(22429): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 29 04:06:26 root maldet(22429): {scan} scan of (6038 files) in progress... Mar 29 04:27:13 root maldet(22429): {hit} malware hit {CAV}Unix.Exploit.CVE_2010_3301-2 found for /home/aadisol/public_html/aca/images/exp2loit Mar 29 04:27:13 root maldet(22429): {quar} malware quarantined from '/home/aadisol/public_html/aca/images/exp2loit' to '/usr/local/maldetect/quarantine/exp2loit.2709717127' Mar 29 04:27:13 root maldet(22429): {hit} malware hit {CAV}Unix.Malware.Agent-6622564-0 found for /home/aadisol/public_html/aca/images/dene Mar 29 04:27:13 root maldet(22429): {quar} malware quarantined from '/home/aadisol/public_html/aca/images/dene' to '/usr/local/maldetect/quarantine/dene.2402128001' Mar 29 04:27:13 root maldet(22429): {hit} malware hit {MD5}php.base64.inject.12944 found for /home/aadisol/public_html/aca/FCK/editor/images/gifimg.php Mar 29 04:27:13 root maldet(22429): {quar} malware quarantined from '/home/aadisol/public_html/aca/FCK/editor/images/gifimg.php' to '/usr/local/maldetect/quarantine/gifimg.php.766671' Mar 29 04:27:13 root maldet(22429): {scan} scan completed on : files 6038, malware hits 3, cleaned hits 0, time 2152s Mar 29 04:27:13 root maldet(22429): {scan} scan report saved, to view run: maldet --report 230329-0351.22429 Mar 30 03:43:32 root maldet(27952): {update} checking for available updates... Mar 30 03:43:32 root maldet(27952): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 30 03:43:32 root maldet(27952): {update} hashing install files and checking against server... Mar 30 03:43:32 root maldet(27952): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 30 03:43:32 root maldet(27952): {update} latest version already installed. Mar 30 03:43:32 root maldet(28097): {sigup} performing signature update check... Mar 30 03:43:32 root maldet(28097): {sigup} local signature set is version 202303283084888 Mar 30 03:43:34 root maldet(28097): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 30 03:43:34 root maldet(28097): {sigup} latest signature set already installed Mar 30 03:43:34 root maldet(28213): {scan} launching scan of /home?/?/public_html/,/var/www/html/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 30 03:43:35 root maldet(28213): {scan} signatures loaded: 17371 (14534 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 30 03:43:35 root maldet(28213): {scan} building file list for of new/modified files from last 1 days, this might take awhile... Mar 30 03:43:35 root maldet(28213): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 30 03:43:35 root maldet(28213): {scan} executed eval /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find "/home/aaar/public_html/" "/home/aadisol/public_html/" "/home/aadiweb/public_html/" "/home/abhayagrawal/public_html/" "/home/aceindia/public_html/" "/home/advancegroupsco/public_html/" "/home/aemsolutions/public_html/" "/home/aftptarun/public_html/" "/home/agarwald/public_html/" "/home/agarwalt/public_html/" "/home/ahmedinternation/public_html/" "/home/aiccnetind/public_html/" "/home/airventi/public_html/" "/home/ajayrat/public_html/" "/home/akasasso/public_html/" "/home/amitrgup/public_html/" "/home/anilayus/public_html/" "/home/ankinfotech/public_html/" "/home/anmindia/public_html/" "/home/arthahadvisors/public_html/" "/home/ascprofessionals/public_html/" "/home/baskco/public_html/" "/home/benstarelectroni/public_html/" "/home/bestdealmachiner/public_html/" "/home/bkrco/public_html/" "/home/bpainsolvency/public_html/" "/home/bpassoc/public_html/" "/home/bsrt/public_html/" "/home/buckingham/public_html/" "/home/caajaykagrawal/public_html/" "/home/cabanahotels/public_html/" "/home/cabansal/public_html/" "/home/cacpa/public_html/" "/home/cadmc/public_html/" "/home/cahukam/public_html/" "/home/calalit/public_html/" "/home/camsa/public_html/" "/home/caopm/public_html/" "/home/capsc/public_html/" "/home/capvco/public_html/" "/home/carajgar/public_html/" "/home/catarun/public_html/" "/home/cavijayr/public_html/" "/home/caykc/public_html/" "/home/credence/public_html/" "/home/csalok/public_html/" "/home/dhanustankar/public_html/" "/home/ditco/public_html/" "/home/dnrassociates/public_html/" "/home/dpacaonl/public_html/" "/home/enfotechindia/public_html/" "/home/fiduciaco/public_html/" "/home/floorkraft/public_html/" "/home/fundingngo/public_html/" "/home/funfrrozen/public_html/" "/home/geoconin/public_html/" "/home/greatarc/public_html/" "/home/grgaccessories/public_html/" "/home/grggroup/public_html/" "/home/growthpharma/public_html/" "/home/gsandco/public_html/" "/home/gstexperts/public_html/" "/home/gstindiaadvisor/public_html/" "/home/harishro/public_html/" "/home/hewaindia/public_html/" "/home/hsaco/public_html/" "/home/icaigzb/public_html/" "/home/iglobalcareers/public_html/" "/home/iiosco/public_html/" "/home/indiagstsolution/public_html/" "/home/jknp/public_html/" "/home/jsrimpex/public_html/" "/home/kailashsewa/public_html/" "/home/kapl/public_html/" "/home/kbassoci/public_html/" "/home/khushifoundation/public_html/" "/home/lacoindi/public_html/" "/home/lctrust/public_html/" "/home/mahabirconstruct/public_html/" "/home/matsassociates/public_html/" "/home/mender/public_html/" "/home/mgaca/public_html/" "/home/microwatersoluti/public_html/" "/home/moneymir/public_html/" "/home/mouse1media/public_html/" "/home/mysacrificeforar/public_html/" "/home/nadbinduinfra/public_html/" "/home/narinder/public_html/" "/home/nichekon/public_html/" "/home/njandco/public_html/" "/home/nkandco/public_html/" "/home/nkjaco/public_html/" "/home/ojalfiresystems/public_html/" "/home/onlinepr/public_html/" "/home/peerindiatravels/public_html/" "/home/pguptaco/public_html/" "/home/pnaindia/public_html/" "/home/pragca/public_html/" "/home/prholding/public_html/" "/home/procareu/public_html/" "/home/rahmande/public_html/" "/home/rajksri/public_html/" "/home/rakshaglobal/public_html/" "/home/rbaca/public_html/" "/home/rccproducts/public_html/" "/home/rcgargca/public_html/" "/home/revhealth/public_html/" "/home/rgacindi/public_html/" "/home/rkcca/public_html/" "/home/rozanase/public_html/" "/home/rsjbassociates/public_html/" "/home/rubayacreation/public_html/" "/home/saaconsu/public_html/" "/home/saawariy/public_html/" "/home/sagcllpsagc/public_html/" "/home/sairamfacility/public_html/" "/home/sakhindia/public_html/" "/home/sampco/public_html/" "/home/sbguptaa/public_html/" "/home/sbrcllp/public_html/" "/home/sfjltd/public_html/" "/home/shrishtioverseas/public_html/" "/home/sibaente/public_html/" "/home/skgconsu/public_html/" "/home/soulsocietyco/public_html/" "/home/sramca/public_html/" "/home/srgtechn/public_html/" "/home/srjnindia/public_html/" "/home/ssahoo/public_html/" "/home/ssclegal/public_html/" "/home/sssminfotech/public_html/" "/home/subsetengg/public_html/" "/home/sudhansh/public_html/" "/home/sunpowersystems/public_html/" "/home/sunshowercpl/public_html/" "/home/supersec/public_html/" "/home/swagtam/public_html/" "/home/tattvamcapital/public_html/" "/home/tattvamvaluers/public_html/" "/home/taxguruk/public_html/" "/home/tcsinfotech/public_html/" "/home/tecwo/public_html/" "/home/thecompunetco/public_html/" "/home/tincansindia/public_html/" "/home/tiyatravel/public_html/" "/home/tradingandlearni/public_html/" "/home/urfco/public_html/" "/home/vastoyou/public_html/" "/home/vbrindia/public_html/" "/home/vedbansal/public_html/" "/home/vimainternation1/public_html/" "/home/vivekanandnature/public_html/" "/home/vmfoundationco/public_html/" "/home/vmism/public_html/" "/home/winnergears/public_html/" "/home/worldwidedigimar/public_html/" "/home/wsmafassociates/public_html/" "/var/www/html/" "/usr/local/apache/htdocs/" /tmp /var/tmp /dev/shm -maxdepth 15 -regextype posix-egrep -type f \( -mtime -1 -o -ctime -1 \) -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 30 03:43:39 root maldet(28213): {scan} file list completed in 4s, found 94 files... Mar 30 03:43:39 root maldet(28213): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 30 03:43:39 root maldet(28213): {scan} scan of (94 files) in progress... Mar 30 03:43:54 root maldet(28213): {scan} scan completed on : files 94, malware hits 0, cleaned hits 0, time 20s Mar 30 03:43:54 root maldet(28213): {scan} scan report saved, to view run: maldet --report 230330-0343.28213 Mar 31 03:43:55 root maldet(6079): {update} checking for available updates... Mar 31 03:43:55 root maldet(6079): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 31 03:43:55 root maldet(6079): {update} new version 1.6.5 found, updating... Mar 31 03:43:56 root maldet(6079): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Mar 31 03:43:56 root maldet(6079): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Mar 31 03:43:56 root maldet(6079): {update} verified md5sum of maldetect-current.tar.gz
Copyright © 2024 - UnknownSec