1#@!#!123s

file_get_contents 1#@!#!123s
: / home / ujaneybc /
Filename : scan_report_02-05-2024
back
----------- SCAN REPORT -----------
TimeStamp: Thu, 2 May 2024 12:39:43 -0400
(/usr/sbin/cxs --clamdsock /var/clamd --dbreport --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 10000 --noforce --html --ignore /etc/cxs/cxs.ignore.manual --options mMOLfSGchexdnwZDRru --noprobability --qoptions Mv --quarantine /opt/cxs/quarantine --report /home/ujaneybc/scan_report_02-05-2024 --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --nounofficial --user ujaneybc --virusscan --vmrssmax 2000000 --waitscan 0 --xtra /etc/cxs/cxs.xtra.manual)


Scanning /home/ujaneybc:

'/home/ujaneybc/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/ujaneybc]

'/home/ujaneybc/.nc_plugin/hidden'
# World writeable directory

'/home/ujaneybc/akshitam.in/about.php'
# (quarantined to /opt/cxs/quarantine/cxsuser/ujaneybc/about.php.1714668248_1) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/ujaneybc/akshitam.in/hm.php'
# (quarantined to /opt/cxs/quarantine/cxsuser/ujaneybc/hm.php.1714668248_1) Known exploit = [Fingerprint Match (fp)] [PHP RFI Exploit [P2060]]

'/home/ujaneybc/allworldenterprises.com/hm.php'
# (quarantined to /opt/cxs/quarantine/cxsuser/ujaneybc/hm.php.1714668248_2) Known exploit = [Fingerprint Match (fp)] [PHP RFI Exploit [P2060]]

'/home/ujaneybc/allworldenterprises.com/cmsxml/hm.php'
# (quarantined to /opt/cxs/quarantine/cxsuser/ujaneybc/hm.php.1714668256_1) Known exploit = [Fingerprint Match (fp)] [PHP RFI Exploit [P2060]]

'/home/ujaneybc/app.allworldenterprises.com/application/controllers/dashboard/Auth.php'
# Universal decode regex match = [universal decoder]
# (quarantined to /opt/cxs/quarantine/cxsuser/ujaneybc/Auth.php.1714668271_1) (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1751]]

'/home/ujaneybc/app.allworldenterprises.com/application/models/Shared_model.php'
# Universal decode regex match = [universal decoder]
# (quarantined to /opt/cxs/quarantine/cxsuser/ujaneybc/Shared_model.php.1714668279_1) (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1751]]

'/home/ujaneybc/chat.intercollege.in/assets/thirdparty/codemirror/mode/clike/index.html'
# Suspicious file type [application/x-c]

'/home/ujaneybc/chat.intercollege.in/layouts/installer/installer.php'
# Universal decode regex match = [universal decoder]
# Scan Timeout (30 secs) while processing:
'/home/ujaneybc/chessboard.cc/chessboard_30dec_2023.zip'
# Scan Timeout (30 secs) while processing:
'/home/ujaneybc/chessboard.cc/demo/lumise.zip'

'/home/ujaneybc/freelifepartner.com/vendor/symfony/console/Resources/bin/hiddeninput.exe'
# MS Windows Binary/Executable [application/x-winexec]

'/home/ujaneybc/hsschool.in/core/vendor/symfony/console/Resources/bin/hiddeninput.exe'
# MS Windows Binary/Executable [application/x-winexec]

'/home/ujaneybc/intercollege.in/vendor/symfony/console/Resources/bin/hiddeninput.exe'
# MS Windows Binary/Executable [application/x-winexec]

'/home/ujaneybc/jogiagroup.com/jogiadata.php'
# Regular expression match = [Adminer - Compact database management]
# (decoded file [depth: 0]) Regular expression match = [Adminer - Compact database management]

'/home/ujaneybc/mail/allworldenterprises.com/info/.spam/new/1664514251.M863831P1640469.premium129.web-hosting.com,S=11482,W=11679'
# (quarantined to /opt/cxs/quarantine/cxsuser/ujaneybc/1664514251.M863831P1640469.premium129.web-hosting.com,S=11482,W=11679.1714676204_1) ClamAV detected virus = [Win.Infostealer.Snakelogger-10008663-2]

'/home/ujaneybc/mail/gnpindia.com/accounts/cur'
# Skipped - too many resources: 20547 ( > filemax=10000)
# Scan Timeout (30 secs) while processing:
'/home/ujaneybc/mail/gnpindia.com/amit/cur/1628845519.M320315P3181839.server43.hostingraja.org,S=25185399,W=25512511:2,S'

'/home/ujaneybc/mail/gnpindia.com/harjot/cur'
# Skipped - too many resources: 18268 ( > filemax=10000)

'/home/ujaneybc/mail/gnpindia.com/manmeet/cur'
# Skipped - too many resources: 18684 ( > filemax=10000)
# Scan Timeout (30 secs) while processing:
'/home/ujaneybc/mail/gnpindia.com/shivam/cur/1673436330.M519282P3457662.server43.hostingraja.org,S=982013,W=1029363:2,S'
# Scan Timeout (30 secs) while processing:
'/home/ujaneybc/mail/gnpindia.com/shivam/cur/1673436388.M503234P3457662.server43.hostingraja.org,S=13608001,W=13784762:2,S'
# Scan Timeout (30 secs) while processing:
'/home/ujaneybc/mail/gnpindia.com/shivam/cur/1675837592.M830823P3059120.server43.hostingraja.org,S=17654572,W=17883995:2,S'

'/home/ujaneybc/mail/new'
# Skipped - too many resources: 34171 ( > filemax=10000)

'/home/ujaneybc/mail/selecthospital.in/tpa/.spam/new/1654095433.M167778P3794147.premium129.web-hosting.com,S=1699983,W=1723311'
# (quarantined to /opt/cxs/quarantine/cxsuser/ujaneybc/1654095433.M167778P3794147.premium129.web-hosting.com,S=1699983,W=1723311.1714678981_1) ClamAV detected virus = [Win.Packed.Msilzilla-10005608-0]

'/home/ujaneybc/mail/selecthospital.in/tpa/.spam/new/1680615588.M513905P1430112.premium129.web-hosting.com,S=1126302,W=1141762'
# (quarantined to /opt/cxs/quarantine/cxsuser/ujaneybc/1680615588.M513905P1430112.premium129.web-hosting.com,S=1126302,W=1141762.1714679026_1) ClamAV detected virus = [Win.Packed.Tedy-10023305-0]

'/home/ujaneybc/mail/selecthospital.in/tpa/.spam/new/1684160166.M788450P1485783.premium129.web-hosting.com,S=1075048,W=1089810'
# (quarantined to /opt/cxs/quarantine/cxsuser/ujaneybc/1684160166.M788450P1485783.premium129.web-hosting.com,S=1075048,W=1089810.1714679031_1) ClamAV detected virus = [Win.Dropper.Formbook-10002429-0]

'/home/ujaneybc/mail/selecthospital.in/tpa/.spam/new/1687846970.M718561P1643647.premium129.web-hosting.com,S=750030,W=759818'
# (quarantined to /opt/cxs/quarantine/cxsuser/ujaneybc/1687846970.M718561P1643647.premium129.web-hosting.com,S=750030,W=759818.1714679091_1) ClamAV detected virus = [Win.Dropper.LokiBot-10028815-0]
# Scan Timeout (30 secs) while processing:
'/home/ujaneybc/mail/selecthospital.in/tpa/.spam/new/1705379567.M909840P2006612.premium245.web-hosting.com,S=839447,W=850984'
# Scan Timeout (30 secs) while processing:
'/home/ujaneybc/mail/selecthospital.in/tpa/.spam/new/1708406433.M875255P3799170.premium245.web-hosting.com,S=796513,W=807488'

'/home/ujaneybc/maizik.com/app/ThirdParty/aws-sdk/vendor/aws/aws-crt-php/ext/awscrt.c'
# Suspicious file type [application/x-c]

'/home/ujaneybc/maizik.com/app/ThirdParty/aws-sdk/vendor/aws/aws-crt-php/ext/crc.c'
# Suspicious file type [application/x-c]

'/home/ujaneybc/maizik.com/app/ThirdParty/aws-sdk/vendor/aws/aws-crt-php/ext/credentials.c'
# Suspicious file type [application/x-c]

'/home/ujaneybc/maizik.com/app/ThirdParty/aws-sdk/vendor/aws/aws-crt-php/ext/crt.c'
# Suspicious file type [application/x-c]

'/home/ujaneybc/maizik.com/app/ThirdParty/aws-sdk/vendor/aws/aws-crt-php/ext/event_loop.c'
# Suspicious file type [application/x-c]

'/home/ujaneybc/maizik.com/app/ThirdParty/aws-sdk/vendor/aws/aws-crt-php/ext/http.c'
# Suspicious file type [application/x-c]

'/home/ujaneybc/maizik.com/app/ThirdParty/aws-sdk/vendor/aws/aws-crt-php/ext/logging.c'
# Suspicious file type [application/x-c]

'/home/ujaneybc/maizik.com/app/ThirdParty/aws-sdk/vendor/aws/aws-crt-php/ext/php_util.c'
# Suspicious file type [application/x-c]

'/home/ujaneybc/maizik.com/app/ThirdParty/aws-sdk/vendor/aws/aws-crt-php/ext/signing.c'
# Suspicious file type [application/x-c]

'/home/ujaneybc/maizik.com/app/ThirdParty/aws-sdk/vendor/aws/aws-crt-php/ext/stream.c'
# Suspicious file type [application/x-c]

'/home/ujaneybc/maizik.com/app/ThirdParty/webp-convert/vendor/rosell-dk/webp-convert/src/Convert/Converters/Binaries/cwebp-060-fbsd'
# Linux Binary/Executable [application/x-executable]

'/home/ujaneybc/maizik.com/app/ThirdParty/webp-convert/vendor/rosell-dk/webp-convert/src/Convert/Converters/Binaries/cwebp-060-solaris'
# Linux Binary/Executable [application/x-executable]

'/home/ujaneybc/maizik.com/app/ThirdParty/webp-convert/vendor/rosell-dk/webp-convert/src/Convert/Converters/Binaries/cwebp-061-linux-x86-64'
# Linux Binary/Executable [application/x-executable]

'/home/ujaneybc/maizik.com/app/ThirdParty/webp-convert/vendor/rosell-dk/webp-convert/src/Convert/Converters/Binaries/cwebp-103-linux-x86-64-static'
# Linux Binary/Executable [application/x-executable]

'/home/ujaneybc/maizik.com/app/ThirdParty/webp-convert/vendor/rosell-dk/webp-convert/src/Convert/Converters/Binaries/cwebp-110-linux-x86-64'
# Linux Binary/Executable [application/x-sharedlib]

'/home/ujaneybc/maizik.com/app/ThirdParty/webp-convert/vendor/rosell-dk/webp-convert/src/Convert/Converters/Binaries/cwebp-110-windows-x64.exe'
# MS Windows Binary/Executable [application/x-winexec]

'/home/ujaneybc/maizik.com/app/ThirdParty/webp-convert/vendor/rosell-dk/webp-convert/src/Convert/Converters/Binaries/cwebp-120-linux-x86-64'
# Linux Binary/Executable [application/x-sharedlib]

'/home/ujaneybc/maizik.com/app/ThirdParty/webp-convert/vendor/rosell-dk/webp-convert/src/Convert/Converters/Binaries/cwebp-120-windows-x64.exe'
# MS Windows Binary/Executable [application/x-winexec]

'/home/ujaneybc/rajkamalsteel.in/about.php'
# (quarantined to /opt/cxs/quarantine/cxsuser/ujaneybc/about.php.1714680590_1) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/ujaneybc/rashanstore.in/hm.php'
# (quarantined to /opt/cxs/quarantine/cxsuser/ujaneybc/hm.php.1714680601_1) Known exploit = [Fingerprint Match (fp)] [PHP RFI Exploit [P2060]]

'/home/ujaneybc/rashanstore.in/css/js/ckeditor/plugins/pastefromword/index.php'
# (quarantined to /opt/cxs/quarantine/cxsuser/ujaneybc/index.php.1714680671_1) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/ujaneybc/rashanstore.in/dist/css/skins/radio.php'
# (quarantined to /opt/cxs/quarantine/cxsuser/ujaneybc/radio.php.1714680679_1) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/ujaneybc/rashanstore.in/plugins/datatables/lock360.php'
# Universal decode regex match = [universal decoder]

'/home/ujaneybc/rashanstore.in/plugins/datatables/extensions/FixedHeader/css/radio.php'
# (quarantined to /opt/cxs/quarantine/cxsuser/ujaneybc/radio.php.1714680706_1) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/ujaneybc/rashanstore.in/plugins/datatables/extensions/Scroller/images/wp-login.php'
# (quarantined to /opt/cxs/quarantine/cxsuser/ujaneybc/wp-login.php.1714680711_1) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/ujaneybc/rashanstore.in/plugins/jQueryUI/lock360.php'
# Universal decode regex match = [universal decoder]

'/home/ujaneybc/rashanstore.in/upload/attachments/2index.php'
# (quarantined to /opt/cxs/quarantine/cxsuser/ujaneybc/2index.php.1714680745_1) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/ujaneybc/rashanstore.in/upload/blogs/content.php'
# (quarantined to /opt/cxs/quarantine/cxsuser/ujaneybc/content.php.1714680745_1) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/ujaneybc/rashanstore.in/upload/slider/2index.php'
# (quarantined to /opt/cxs/quarantine/cxsuser/ujaneybc/2index.php.1714680801_1) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/ujaneybc/rkichayatnagar.com/hm.php'
# (quarantined to /opt/cxs/quarantine/cxsuser/ujaneybc/hm.php.1714680806_1) Known exploit = [Fingerprint Match (fp)] [PHP RFI Exploit [P2060]]

'/home/ujaneybc/rkichayatnagar.com/rs-plugin/font/wp-login.php'
# (quarantined to /opt/cxs/quarantine/cxsuser/ujaneybc/wp-login.php.1714680830_1) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/ujaneybc/rkichayatnagar.com/rs-plugin/images/gradient/index.php'
# (quarantined to /opt/cxs/quarantine/cxsuser/ujaneybc/index.php.1714680830_1) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/ujaneybc/rkichayatnagar.com/template/assets/img/content.php'
# (quarantined to /opt/cxs/quarantine/cxsuser/ujaneybc/content.php.1714680830_1) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/ujaneybc/rkichayatnagar.com/template/front/css/lock360.php'
# Universal decode regex match = [universal decoder]

'/home/ujaneybc/rkichayatnagar.com/template/front/ico/2index.php'
# (quarantined to /opt/cxs/quarantine/cxsuser/ujaneybc/2index.php.1714680831_1) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/ujaneybc/rkichayatnagar.com/template/front/img/wp-login.php'
# (quarantined to /opt/cxs/quarantine/cxsuser/ujaneybc/wp-login.php.1714680831_1) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/ujaneybc/rkichayatnagar.com/template/front/img/preview/2index.php'
# (quarantined to /opt/cxs/quarantine/cxsuser/ujaneybc/2index.php.1714680831_2) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/ujaneybc/rkichayatnagar.com/template/front/img/preview/slider/radio.php'
# (quarantined to /opt/cxs/quarantine/cxsuser/ujaneybc/radio.php.1714680831_1) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/ujaneybc/rkichayatnagar.com/template/front/plugins/index.php'
# (quarantined to /opt/cxs/quarantine/cxsuser/ujaneybc/index.php.1714680831_1) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2155]]

'/home/ujaneybc/rkichayatnagar.com/template/front/plugins/bootstrap/css/lock360.php'
# Universal decode regex match = [universal decoder]
# Scan Timeout (30 secs) while processing:
'/home/ujaneybc/shivservice.in/Shivservice_30_December_2023.zip'

----------- SCAN SUMMARY -----------
Scanned directories: 19558
Scanned files: 105136
Ignored items: 801
Suspicious matches: 66
Viruses found: 5
Fingerprint matches: 24
Data scanned: 17330.84 MB
Scan peak memory: 418396 kB
Scan time/item: 0.106 sec
Scan time: 13212.045 sec