1#@!#!123s

: / home / hrfiudwx /
Filename : scanreport-hrfiudwx-Jul_15_2025_12h44m.txt
back
----------- SCAN REPORT -----------
TimeStamp: Tue, 15 Jul 2025 12:44:32 -0400
(/usr/sbin/cxs --background --clamdsock /var/clamd --dbreport --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 50000 --noforce --html --ignore /etc/cxs/cxs.ignore.manual --options mMOLfSGchexdnwZDRru --noprobability --qoptions Mv --report /home/hrfiudwx/scanreport-hrfiudwx-Jul_15_2025_12h44m.txt --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --unofficial --user hrfiudwx --virusscan --vmrssmax 2000000 --waitscan 0 --xtra /etc/cxs/cxs.xtra.manual)


Scanning /home/hrfiudwx:

'/home/hrfiudwx/.nc_plugin/hidden'
# World writeable directory

'/home/hrfiudwx/public_html/backup-10.25.2024_19-36-27_affinsyw/homedir/smallbizsavvytips.com/wp-content/plugins/akismet/akismet.php'
# Script version check [OLD] [Akismet Anti-spam: Spam Protection v5.3.2 < v5.3.7]

'/home/hrfiudwx/public_html/backup-10.25.2024_19-36-27_affinsyw/homedir/smallbizsavvytips.com/wp-content/plugins/classic-editor/classic-editor.php'
# Script version check [OLD] [Classic Editor v1.6.3 < v1.6.7]

'/home/hrfiudwx/public_html/backup-10.25.2024_19-36-27_affinsyw/homedir/smallbizsavvytips.com/wp-content/plugins/litespeed-cache/litespeed-cache.php'
# Script version check [OLD] [LiteSpeed Cache v6.5.1 < v7.0.1]

'/home/hrfiudwx/public_html/backup-10.25.2024_19-36-27_affinsyw/homedir/smallbizsavvytips.com/wp-content/plugins/loginizer/loginizer.php'
# Script version check [OLD] [Loginizer v1.8.3 < v2.0.0]

'/home/hrfiudwx/public_html/backup-10.25.2024_19-36-27_affinsyw/homedir/smallbizsavvytips.com/wp-includes/version.php'
# Script version check [OLD] [Wordpress v6.6.2 < v6.8.1]

'/home/hrfiudwx/public_html/backup-10.25.2024_19-36-27_affinsyw/homedir/smallbizsavvytips.com/wp-includes/IXR/index.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]]

'/home/hrfiudwx/public_html/wp-includes/version.php'
# Script version check [OLD] [Wordpress v6.2.6 < v6.8.1]

'/home/hrfiudwx/softaculous_backups/smallbizsavvytips.com'
# World writeable directory

'/home/hrfiudwx/softaculous_backups/smallbizsavvytips.com/cgi-bin/admin.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]]

'/home/hrfiudwx/softaculous_backups/smallbizsavvytips.com/wp-admin/maint/index.jpg'
# Suspicious image file (hidden script file)

'/home/hrfiudwx/softaculous_backups/smallbizsavvytips.com/wp-content/plugins/akismet/akismet.php'
# Script version check [OLD] [Akismet Anti-spam: Spam Protection v5.3.2 < v5.3.7]

'/home/hrfiudwx/softaculous_backups/smallbizsavvytips.com/wp-content/plugins/classic-editor/classic-editor.php'
# Script version check [OLD] [Classic Editor v1.6.3 < v1.6.7]

'/home/hrfiudwx/softaculous_backups/smallbizsavvytips.com/wp-content/plugins/litespeed-cache/litespeed-cache.php'
# Script version check [OLD] [LiteSpeed Cache v6.5.4 < v7.0.1]

'/home/hrfiudwx/softaculous_backups/smallbizsavvytips.com/wp-content/plugins/loginizer/loginizer.php'
# Script version check [OLD] [Loginizer v1.8.3 < v2.0.0]

'/home/hrfiudwx/softaculous_backups/smallbizsavvytips.com/wp-includes/version.php'
# Script version check [OLD] [Wordpress v6.7.2 < v6.8.1]

'/home/hrfiudwx/softaculous_backups/smallbizsavvytips.com/wp-includes/blocks/list/wp-login.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]]

'/home/hrfiudwx/yamond.com/admin.php'
# Universal decode regex match = [universal decoder]
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]]

'/home/hrfiudwx/yamond.com/.well-known/pki-validation'
# World writeable directory

'/home/hrfiudwx/yamond.com/cgi-bin'
# World writeable directory

'/home/hrfiudwx/yamond.com/dup-installer/admin.php'
# (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]]

----------- SCAN SUMMARY -----------
Scanned directories: 9968
Scanned files: 59814
Ignored items: 410
Suspicious matches: 25
Viruses found: 0
Fingerprint matches: 5
Data scanned: 2327.84 MB
Scan peak memory: 419088 kB
Scan time/item: 0.035 sec
Scan time: 2473.653 sec