1#@!#!123s

��JFIF�� 1#@!#!123s
: / home / sathmcmy /
Filename : scanreport-sathmcmy-Jan_31_2023_00h55m.txt
back
----------- SCAN REPORT -----------
TimeStamp: Tue, 31 Jan 2023 00:55:40 -0500
(/usr/sbin/cxs --background --clamdsock /var/clamd --dbreport --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 50000 --noforce --html --ignore /etc/cxs/cxs.ignore.manual --options mMOLfSGchexdnwZDRru --noprobability --qoptions Mv --report /home/sathmcmy/scanreport-sathmcmy-Jan_31_2023_00h55m.txt --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --unofficial --user sathmcmy --virusscan --vmrssmax 2000000 --xtra /etc/cxs/cxs.xtra.manual)


Scanning /home/sathmcmy:

'/home/sathmcmy/access-logs'
# Symlink to [/etc/apache2/logs/domlogs/sathmcmy]

'/home/sathmcmy/.nc_plugin/hidden'
# World writeable directory

'/home/sathmcmy/public_html/__MACOSX/march_3/admin/themes.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) ClamAV detected virus = [TO-27085.WEBSHELL.module_php-onlyencodedpart.MD5-af45d467cbe61866170fae4c33d52a2f.size-114515.UNOFFICIAL]

'/home/sathmcmy/public_html/admin/js/tiny-mce/plugins/save/themes.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) ClamAV detected virus = [TO-27085.WEBSHELL.module_php-onlyencodedpart.MD5-af45d467cbe61866170fae4c33d52a2f.size-114515.UNOFFICIAL]

'/home/sathmcmy/public_html/admin/upload'
# World writeable directory

'/home/sathmcmy/public_html/classes'
# World writeable directory

'/home/sathmcmy/public_html/config'
# World writeable directory

'/home/sathmcmy/public_html/helpers'
# World writeable directory

'/home/sathmcmy/public_html/images'
# World writeable directory

'/home/sathmcmy/public_html/inc'
# World writeable directory

'/home/sathmcmy/public_html/lib'
# World writeable directory

'/home/sathmcmy/tmp/awstats/ssl/awstats022021.sathibhai.com.txt'
# ClamAV detected virus = [YARA.r57shell_php_php.UNOFFICIAL]

'/home/sathmcmy/tmp/awstats/ssl/awstats032021.sathibhai.com.txt'
# ClamAV detected virus = [YARA.r57shell_php_php.UNOFFICIAL]

'/home/sathmcmy/tmp/awstats/ssl/awstats112021.sathibhai.com.txt'
# ClamAV detected virus = [YARA.r57shell_php_php.UNOFFICIAL]

----------- SCAN SUMMARY -----------
Scanned directories: 468
Scanned files: 1672
Ignored items: 12
Suspicious matches: 15
Viruses found: 5
Fingerprint matches: 0
Data scanned: 105.19 MB
Scan peak memory: 251736 kB
Scan time/item: 0.036 sec
Scan time: 76.316 sec