----------- SCAN REPORT -----------
TimeStamp: Mon, 24 Mar 2025 11:18:23 -0400
(/usr/sbin/cxs --background --clamdsock /var/clamd --dbreport --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 50000 --noforce --html --ignore /etc/cxs/cxs.ignore.manual --options mMOLfSGchexdnwZDRru --noprobability --qoptions Mv --report /home/desetmhw/scanreport-desetmhw-Mar_24_2025_11h18m.txt --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --unofficial --user desetmhw --virusscan --vmrssmax 2000000 --waitscan 0 --xtra /etc/cxs/cxs.xtra.manual)


Scanning /home/desetmhw:
# Scan Timeout (30 secs) while processing:
'/home/desetmhw/backup-12.01.2024_07-45-28_mahnwjyx.zip'

'/home/desetmhw/.nc_plugin/hidden'
# World writeable directory

'/home/desetmhw/.trash/wp-content/plugins/akismet/akismet.php'
# Script version check [OLD] [Akismet Anti-spam: Spam Protection v5.3.6 < v5.3.7]

'/home/desetmhw/247tyreservice.com/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/desetmhw/247tyreservice.com/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/desetmhw/247tyreservice.com/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Math/BigInteger/Engines/PHP/Reductions/povray.png'
# Suspicious image file (hidden script file)

'/home/desetmhw/247tyreservice.com/wp-content/themes/astra/admin/includes/class-astra-menu.php'
# Universal decode regex match = [universal decoder]

'/home/desetmhw/cartyreservice.com/wp-content/plugins/all-in-one-wp-migration/all-in-one-wp-migration.php'
# Script version check [OLD] [All-in-One WP Migration v6.77 < v7.90]

'/home/desetmhw/cartyreservice.com/wp-content/plugins/filester/includes/File_manager/FileManager.php'
# Universal decode regex match = [universal decoder]

'/home/desetmhw/cartyreservice.com/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/desetmhw/cartyreservice.com/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/desetmhw/estraveltourim.site/.tmb'
# World writeable directory

'/home/desetmhw/estraveltourim.site/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php'
# Universal decode regex match = [universal decoder]

'/home/desetmhw/estraveltourim.site/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php'
# Universal decode regex match = [universal decoder]

'/home/desetmhw/estraveltourim.site/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php'
# Universal decode regex match = [universal decoder]

'/home/desetmhw/estraveltourim.site/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'
# Suspicious file type [application/x-c]

'/home/desetmhw/estraveltourim.site/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html'
# Suspicious file type [application/x-c]

'/home/desetmhw/estraveltourim.site/wp-content/plugins/wp-travel-engine/vendor/rlanvin/php-rrule/src/RRule.php'
# Universal decode regex match = [universal decoder]

'/home/desetmhw/estraveltourim.site/wp-content/themes/astra/admin/includes/class-astra-menu.php'
# Universal decode regex match = [universal decoder]

'/home/desetmhw/householdjunkremoval.com/.tmb'
# World writeable directory

'/home/desetmhw/householdjunkremoval.com/wp-content/plugins/filester/includes/File_manager/FileManager.php'
# Universal decode regex match = [universal decoder]

'/home/desetmhw/householdjunkremoval.com/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/desetmhw/householdjunkremoval.com/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/desetmhw/householdjunkremoval.com/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html'
# Suspicious file type [application/x-c]

'/home/desetmhw/householdjunkremoval.com/wp-content/themes/astra/admin/includes/class-astra-menu.php'
# Universal decode regex match = [universal decoder]

'/home/desetmhw/junk-removal-dubai.com/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/desetmhw/junk-removal-dubai.com/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/desetmhw/junksremovals-dubai.com/.tmb'
# World writeable directory

'/home/desetmhw/junksremovals-dubai.com/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/desetmhw/junksremovals-dubai.com/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/desetmhw/junksremovals-dubai.com/wp-content/uploads/rometheme_template'
# World writeable directory
# Scan Timeout (30 secs) while processing:
'/home/desetmhw/softaculous_backups/wp.26_14829.2025-03-24_10-34-44.tar.gz'
# Scan Timeout (30 secs) while processing:
'/home/desetmhw/softaculous_backups/wp.26_88035.2025-03-24_10-34-57.tar.gz'
# Scan Timeout (30 secs) while processing:
'/home/desetmhw/softaculous_backups/wp.26_93532.2025-03-24_10-34-56.tar.gz'

'/home/desetmhw/starbatteryreplacementservice.site/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/desetmhw/starbatteryreplacementservice.site/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/desetmhw/starbatteryreplacementservice.site/wp-content/themes/astra/admin/includes/class-astra-menu.php'
# Universal decode regex match = [universal decoder]

'/home/desetmhw/ushomesaloonservices.com/index.php'
# Known exploit = [Fingerprint Match (fp)] [PHP OBF Exploit [P2241]]

'/home/desetmhw/ushomesaloonservices.com/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/desetmhw/ushomesaloonservices.com/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

----------- SCAN SUMMARY -----------
Scanned directories: 23150
Scanned files: 128457
Ignored items: 490
Suspicious matches: 36
Viruses found: 0
Fingerprint matches: 1
Data scanned: 5892.87 MB
Scan peak memory: 413096 kB
Scan time/item: 0.039 sec
Scan time: 5927.031 sec