1#@!#!123s

file_get_contents 1#@!#!123s
: / home / ujaneybc /
Filename : scanreport-ujaneybc-Aug_16_2023_11h11m.txt
back
----------- SCAN REPORT -----------
TimeStamp: Wed, 16 Aug 2023 11:11:33 -0400
(/usr/sbin/cxs --background --clamdsock /var/clamd --dbreport --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 50000 --noforce --html --ignore /etc/cxs/cxs.ignore.manual --options mMOLfSGchexdnwZDRru --noprobability --qoptions Mv --report /home/ujaneybc/scanreport-ujaneybc-Aug_16_2023_11h11m.txt --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --unofficial --user ujaneybc --virusscan --vmrssmax 2000000 --xtra /etc/cxs/cxs.xtra.manual)


Scanning /home/ujaneybc:

'/home/ujaneybc/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/ujaneybc]

'/home/ujaneybc/.nc_plugin/hidden'
# World writeable directory
# Scan Timeout (30 secs) while processing:
'/home/ujaneybc/.npm/_cacache/content-v2/sha1/fc/84/099664460b90ca862d9300b6bfbbbfbf8056'
# Scan Timeout (30 secs) while processing:
'/home/ujaneybc/.npm/_cacache/content-v2/sha512/bf/69/0311ee7b95e713ba568322e3533f2dd1cb880b189e99d4edef13592b81764daec43e2c54c61d5c558dc5cfb35ecb85b65519e74026ff17675b6f8f916f4a'
# Scan Timeout (30 secs) while processing:
'/home/ujaneybc/.npm/_cacache/content-v2/sha512/e0/14/09a0fa282899761bd8f75dfb642178e80bd0b402fd8d3ab5a66cb593d6f1f7d867125078ccd00aeb6ba51f4ec5727cc02e17368bb9c5e7d6c69dc49c9d03'

'/home/ujaneybc/app.allworldenterprises.com/application/controllers/dashboard/Auth.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match] [PHP Exploit [P1751]]

'/home/ujaneybc/app.allworldenterprises.com/application/models/Shared_model.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match] [PHP Exploit [P1751]]

'/home/ujaneybc/chat.intercollege.in/weso.php'
# Decode regex match = [decode regex: 1]
# Scan Timeout (30 secs) while processing:
'/home/ujaneybc/chat.intercollege.in/wesobase.js'

'/home/ujaneybc/chat.intercollege.in/assets/thirdparty/codemirror/mode/clike/index.html'
# Suspicious file type [application/x-c]

'/home/ujaneybc/hsschool.in/assets/front/css/index.php'
# ClamAV detected virus = [TO-28313.WEBSHELL.index_php.MD5-ef4aafb92c6db470d29ab2e5f65254be.size-8755.UNOFFICIAL]

'/home/ujaneybc/hsschool.in/core/vendor/symfony/console/Resources/bin/hiddeninput.exe'
# MS Windows Binary/Executable [application/x-winexec]

'/home/ujaneybc/intercollege.in/vendor/symfony/console/Resources/bin/hiddeninput.exe'
# MS Windows Binary/Executable [application/x-winexec]

'/home/ujaneybc/jogiagroup.com/jogiadata.php'
# Regular expression match = [Adminer - Compact database management]

'/home/ujaneybc/logs/_wildcard_.hsschool.in-ssl_log.bkup'
# Symlink to [/etc/apache2/logs/domlogs/_wildcard_.hsschool.in-ssl_log.bkup]

'/home/ujaneybc/logs/_wildcard_.intercollege.in-ssl_log.bkup'
# Symlink to [/etc/apache2/logs/domlogs/_wildcard_.intercollege.in-ssl_log.bkup]

'/home/ujaneybc/logs/_wildcard_.intercollege.in.bkup'
# Symlink to [/etc/apache2/logs/domlogs/_wildcard_.intercollege.in.bkup]

'/home/ujaneybc/logs/badda.7janm.com-ssl_log.bkup'
# Symlink to [/etc/apache2/logs/domlogs/badda.7janm.com-ssl_log.bkup]

'/home/ujaneybc/logs/badda.7janm.com.bkup'
# Symlink to [/etc/apache2/logs/domlogs/badda.7janm.com.bkup]

'/home/ujaneybc/logs/bill.rpfoods.in-ssl_log.bkup'
# Symlink to [/etc/apache2/logs/domlogs/bill.rpfoods.in-ssl_log.bkup]

'/home/ujaneybc/logs/bill.rpfoods.in.bkup'
# Symlink to [/etc/apache2/logs/domlogs/bill.rpfoods.in.bkup]

'/home/ujaneybc/logs/chat.intercollege.in-ssl_log.bkup'
# Symlink to [/etc/apache2/logs/domlogs/chat.intercollege.in-ssl_log.bkup]

'/home/ujaneybc/logs/divyadeepgyanpeethic.7janm.com-ssl_log.bkup'
# Symlink to [/etc/apache2/logs/domlogs/divyadeepgyanpeethic.7janm.com-ssl_log.bkup]

'/home/ujaneybc/logs/divyadeepgyanpeethic.7janm.com.bkup'
# Symlink to [/etc/apache2/logs/domlogs/divyadeepgyanpeethic.7janm.com.bkup]

'/home/ujaneybc/logs/dsmintercollegesambhal.7janm.com.bkup'
# Symlink to [/etc/apache2/logs/domlogs/dsmintercollegesambhal.7janm.com.bkup]

'/home/ujaneybc/logs/heritageintercollege.7janm.com-ssl_log.bkup'
# Symlink to [/etc/apache2/logs/domlogs/heritageintercollege.7janm.com-ssl_log.bkup]

'/home/ujaneybc/logs/heritageintercollege.7janm.com.bkup'
# Symlink to [/etc/apache2/logs/domlogs/heritageintercollege.7janm.com.bkup]

'/home/ujaneybc/logs/hsschool.7janm.com-ssl_log.bkup'
# Symlink to [/etc/apache2/logs/domlogs/hsschool.7janm.com-ssl_log.bkup]

'/home/ujaneybc/logs/intercollege.in.7janm.com-ssl_log.bkup'
# Symlink to [/etc/apache2/logs/domlogs/intercollege.in.7janm.com-ssl_log.bkup]

'/home/ujaneybc/logs/jogiagroup.com.7janm.com-ssl_log-Aug-2023.gz'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/ujaneybc/logs/jogiagroup.com.7janm.com-ssl_log.bkup'
# Symlink to [/etc/apache2/logs/domlogs/jogiagroup.com.7janm.com-ssl_log.bkup]

'/home/ujaneybc/logs/mail.badda.in-ssl_log.bkup'
# Symlink to [/etc/apache2/logs/domlogs/mail.badda.in-ssl_log.bkup]

'/home/ujaneybc/logs/mail.badda.in.bkup'
# Symlink to [/etc/apache2/logs/domlogs/mail.badda.in.bkup]

'/home/ujaneybc/logs/mail.selecthospital.in-ssl_log.bkup'
# Symlink to [/etc/apache2/logs/domlogs/mail.selecthospital.in-ssl_log.bkup]

'/home/ujaneybc/logs/mail.selecthospital.in.bkup'
# Symlink to [/etc/apache2/logs/domlogs/mail.selecthospital.in.bkup]

'/home/ujaneybc/logs/meerutgirlsintercollege.7janm.com-ssl_log.bkup'
# Symlink to [/etc/apache2/logs/domlogs/meerutgirlsintercollege.7janm.com-ssl_log.bkup]

'/home/ujaneybc/logs/meerutgirlsintercollege.7janm.com.bkup'
# Symlink to [/etc/apache2/logs/domlogs/meerutgirlsintercollege.7janm.com.bkup]

'/home/ujaneybc/logs/mohsinaintercollege.7janm.com-ssl_log.bkup'
# Symlink to [/etc/apache2/logs/domlogs/mohsinaintercollege.7janm.com-ssl_log.bkup]

'/home/ujaneybc/logs/mohsinaintercollege.7janm.com.bkup'
# Symlink to [/etc/apache2/logs/domlogs/mohsinaintercollege.7janm.com.bkup]

'/home/ujaneybc/logs/ndndfc.7janm.com-Aug-2023.gz'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/ujaneybc/logs/ndndfc.7janm.com-ssl_log.bkup'
# Symlink to [/etc/apache2/logs/domlogs/ndndfc.7janm.com-ssl_log.bkup]

'/home/ujaneybc/logs/ndndfc.7janm.com.bkup'
# Symlink to [/etc/apache2/logs/domlogs/ndndfc.7janm.com.bkup]

'/home/ujaneybc/logs/pulkitsharma.7janm.com-ssl_log-Jul-2023.gz'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/ujaneybc/logs/rashanstore.7janm.com-Aug-2023.gz'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/ujaneybc/logs/rashanstore.7janm.com-ssl_log.bkup'
# Symlink to [/etc/apache2/logs/domlogs/rashanstore.7janm.com-ssl_log.bkup]

'/home/ujaneybc/logs/rashanstore.7janm.com.bkup'
# Symlink to [/etc/apache2/logs/domlogs/rashanstore.7janm.com.bkup]

'/home/ujaneybc/logs/rkichayatnagar.7janm.com-ssl_log.bkup'
# Symlink to [/etc/apache2/logs/domlogs/rkichayatnagar.7janm.com-ssl_log.bkup]

'/home/ujaneybc/logs/rkichayatnagar.7janm.com.bkup'
# Symlink to [/etc/apache2/logs/domlogs/rkichayatnagar.7janm.com.bkup]

'/home/ujaneybc/logs/rpfoods.7janm.com-ssl_log.bkup'
# Symlink to [/etc/apache2/logs/domlogs/rpfoods.7janm.com-ssl_log.bkup]

'/home/ujaneybc/logs/rpfoods.7janm.com.bkup'
# Symlink to [/etc/apache2/logs/domlogs/rpfoods.7janm.com.bkup]

'/home/ujaneybc/logs/selecthospital.7janm.com-ssl_log-Aug-2023.gz'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/ujaneybc/logs/selecthospital.7janm.com-ssl_log.bkup'
# Symlink to [/etc/apache2/logs/domlogs/selecthospital.7janm.com-ssl_log.bkup]

'/home/ujaneybc/logs/selecthospital.7janm.com.bkup'
# Symlink to [/etc/apache2/logs/domlogs/selecthospital.7janm.com.bkup]

'/home/ujaneybc/logs/shriramsvmicgohawar.7janm.com-ssl_log.bkup'
# Symlink to [/etc/apache2/logs/domlogs/shriramsvmicgohawar.7janm.com-ssl_log.bkup]

'/home/ujaneybc/logs/shriramsvmicgohawar.7janm.com.bkup'
# Symlink to [/etc/apache2/logs/domlogs/shriramsvmicgohawar.7janm.com.bkup]

'/home/ujaneybc/logs/sl.rpfoods.in-ssl_log.bkup'
# Symlink to [/etc/apache2/logs/domlogs/sl.rpfoods.in-ssl_log.bkup]

'/home/ujaneybc/logs/sl.rpfoods.in.bkup'
# Symlink to [/etc/apache2/logs/domlogs/sl.rpfoods.in.bkup]

'/home/ujaneybc/logs/testing.rkichayatnagar.com-ssl_log.bkup'
# Symlink to [/etc/apache2/logs/domlogs/testing.rkichayatnagar.com-ssl_log.bkup]
# Scan Timeout (30 secs) while processing:
'/home/ujaneybc/mail/allworldenterprises.com/info/cur/1654864967.M876789P2327801.premium129.web-hosting.com,S=19466417,W=19719324:2,S'
# Scan Timeout (30 secs) while processing:
'/home/ujaneybc/mail/allworldenterprises.com/info/cur/1663158648.M815241P1375657.premium129.web-hosting.com,S=19471193,W=19724494:2,S'
# Scan Timeout (30 secs) while processing:
'/home/ujaneybc/mail/lawsuvidha.com/info/cur/1666995956.M589815P2269975.premium129.web-hosting.com,S=16691207,W=16913180:2,'
# Scan Timeout (30 secs) while processing:
'/home/ujaneybc/mail/rpfoods.in/info/new/1672719138.M887609P2946578.premium129.web-hosting.com,S=19847765,W=20105680'
# Scan Timeout (30 secs) while processing:
'/home/ujaneybc/mail/selecthospital.in/info/.Sent/cur/1607320479.M193186P314636.premium72.web-hosting.com,S=13969025,W=14150590:2,S'

'/home/ujaneybc/mail/selecthospital.in/tpa/.spam/new/1654095433.M167778P3794147.premium129.web-hosting.com,S=1699983,W=1723311'
# ClamAV detected virus = [Win.Packed.Msilzilla-10005608-0]

'/home/ujaneybc/mail/selecthospital.in/tpa/.spam/new/1684160166.M788450P1485783.premium129.web-hosting.com,S=1075048,W=1089810'
# ClamAV detected virus = [Win.Dropper.Formbook-10002429-0]
# Scan Timeout (30 secs) while processing:
'/home/ujaneybc/mail/selecthospital.in/tpa/.spam/new/1684240642.M409024P3499833.premium129.web-hosting.com,S=1127485,W=1142971'
# Scan Timeout (30 secs) while processing:
'/home/ujaneybc/mail/selecthospital.in/tpa/.spam/new/1684473637.M933323P371982.premium129.web-hosting.com,S=1073631,W=1088393'
# Scan Timeout (30 secs) while processing:
'/home/ujaneybc/mail/selecthospital.in/tpa/.spam/new/1684833938.M928616P1796662.premium129.web-hosting.com,S=902978,W=915386'
# Scan Timeout (30 secs) while processing:
'/home/ujaneybc/mail/selecthospital.in/tpa/.spam/new/1686721058.M432953P1211240.premium129.web-hosting.com,S=984935,W=998468'
# Scan Timeout (30 secs) while processing:
'/home/ujaneybc/mail/selecthospital.in/tpa/.spam/new/1686896454.M227332P3162121.premium129.web-hosting.com,S=973425,W=986803'
# Scan Timeout (30 secs) while processing:
'/home/ujaneybc/mail/selecthospital.in/tpa/.spam/new/1688456383.M610089P456504.premium129.web-hosting.com,S=929151,W=941922'

'/home/ujaneybc/quiz.intercollege.in/index.php'
# ClamAV detected virus = [{HEX}php.generic.malware.442.UNOFFICIAL]

'/home/ujaneybc/rashanstore.in/plugins/datatables/lock360.php'
# Universal decode regex match = [universal decoder]
# Scan Timeout (30 secs) while processing:
'/home/ujaneybc/rkichayatnagar.com/rkic.zip'

'/home/ujaneybc/shivservice.in/.htaccess_'
# SUID permission set
# GUID permission set
# Scan Timeout (30 secs) while processing:
'/home/ujaneybc/shivservice.in/cgi-bin.zip'

'/home/ujaneybc/tmp/awstats/awstats072023.ndndfc.7janm.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/ujaneybc/tmp/awstats/awstats072023.rashanstore.7janm.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/ujaneybc/tmp/awstats/awstats072023.rkichayatnagar.7janm.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/ujaneybc/tmp/awstats/awstats082023.ndndfc.7janm.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/ujaneybc/tmp/awstats/awstats082023.rashanstore.7janm.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/ujaneybc/tmp/awstats/ssl/awstats072023.jogiagroup.com.7janm.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/ujaneybc/tmp/awstats/ssl/awstats072023.pulkitsharma.7janm.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/ujaneybc/tmp/awstats/ssl/awstats082023.jogiagroup.com.7janm.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

----------- SCAN SUMMARY -----------
Scanned directories: 10691
Scanned files: 98756
Ignored items: 475
Suspicious matches: 69
Viruses found: 17
Fingerprint matches: 2
Data scanned: 4505.91 MB
Scan peak memory: 315072 kB
Scan time/item: 0.073 sec
Scan time: 8000.841 sec