OwlCyberSecurity - MANAGER

Edit File: scanreport-makmfewe-Apr_14_2025_09h12m.txt

----------- SCAN REPORT ----------- TimeStamp: Mon, 14 Apr 2025 09:12:03 -0400 (/usr/sbin/cxs --background --clamdsock /var/clamd --dbreport --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 50000 --noforce --html --ignore /etc/cxs/cxs.ignore.manual --options mMOLfSGchexdnwZDRru --noprobability --qoptions Mv --report /home/makmfewe/scanreport-makmfewe-Apr_14_2025_09h12m.txt --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --unofficial --user makmfewe --virusscan --vmrssmax 2000000 --waitscan 0 --xtra /etc/cxs/cxs.xtra.manual) Scanning /home/makmfewe: '/home/makmfewe/access-logs' # Symlink to [/etc/apache2/logs/domlogs/makmfewe] '/home/makmfewe/.nc_plugin/hidden' # World writeable directory '/home/makmfewe/360legaljusticehub.com/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]] '/home/makmfewe/360legaljusticehub.com/wp-content/plugins/click-to-chat-for-whatsapp/new/admin/class-ht-ctc-admin-main-page.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/aiqaderm.com/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]] '/home/makmfewe/aiqaderm.com/rs/admin.php' # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]] '/home/makmfewe/aiqaderm.com/wp-content/plugins/click-to-chat-for-whatsapp/new/admin/class-ht-ctc-admin-main-page.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/aiqaderm.com/wp-content/plugins/meta-box/inc/about/about.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/aiqaderm.com/wp-content/plugins/meta-box/src/Dashboard/Dashboard.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/aiqaderm.com/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/aiqaderm.com/wp-content/plugins/woocommerce/src/Internal/BrandingController.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/aiqaderm.com/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/aiqaderm.com/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/aiqaderm.com/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c' # Suspicious file type [application/x-c] # Scan Timeout (30 secs) while processing: '/home/makmfewe/aiqaderm.com/wp-content/uploads/2024/12/medibazar-medical-store-ecommerce-theme-2024-11-04-08-54-59-utc.zip' '/home/makmfewe/cosmopolitanestates.com/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]] '/home/makmfewe/cosmopolitanestates.com/wp-content/plugins/click-to-chat-for-whatsapp/new/admin/class-ht-ctc-admin-main-page.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/cosmopolitanestates.com/wp-content/plugins/testimonial-free/src/Admin/Admin.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/cosmopolitanestates.com/wp-content/plugins/wp-optimize/includes/class-wp-optimize-admin.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/dentistring.com/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]] '/home/makmfewe/dentistring.com/wp-content/uploads' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/2023' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/2023/06' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/2023/07' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/2023/08' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/2023/09' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/2023/10' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/2023/11' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/2023/12' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/2024' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/2024/01' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/2024/02' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/2024/03' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/2024/04' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/2024/05' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/2024/06' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/2024/07' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/2024/08' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/2024/09' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/2024/10' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/2024/11' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/2024/12' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/2025' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/2025/01' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/2025/02' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/2025/03' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/2025/04' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/elementor' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/elementor/css' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/elementor/google-fonts' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/elementor/google-fonts/css' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/elementor/google-fonts/fonts' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/elementor/thumbs' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/template-kits' # World writeable directory '/home/makmfewe/dentistring.com/wp-content/uploads/template-kits/50c4c67dc886bd86772320be042bde43' # World writeable directory '/home/makmfewe/dingomo.com/public/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]] # Scan Timeout (30 secs) while processing: '/home/makmfewe/dingomo.com/public/plugins/pdfmake/pdfmake.js.map' # Scan Timeout (30 secs) while processing: '/home/makmfewe/dingomo.com/public/plugins/pdfmake/pdfmake.min.js.map' '/home/makmfewe/dingomo.com/public/storage' # World writeable directory # Scan Timeout (30 secs) while processing: '/home/makmfewe/dingomo.com/public/storage/category_images/category_2023_07_10_21_51_28.jpg' '/home/makmfewe/dingomo.com/storage' # World writeable directory '/home/makmfewe/dingomo.com/vendor/symfony/console/Resources/bin/hiddeninput.exe' # MS Windows Binary/Executable [application/x-winexec] '/home/makmfewe/drmohsinazeem.com/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]] '/home/makmfewe/drmohsinazeem.com/wp-content/plugins/selection-lite/src/Merkulove/Unity/PluginHelper.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/drmohsinazeem.com/wp-content/plugins/selection-lite/src/Merkulove/Unity/Settings.php' # Universal decode regex match = [universal decoder] # Scan Timeout (30 secs) while processing: '/home/makmfewe/drmohsinazeem.com/wp-content/uploads/template-kits/b290288a188b31a9e7ab70ef52949a9d/source-18.zip' # Scan Timeout (30 secs) while processing: '/home/makmfewe/drmohsinazeem.com/wp-content/wpvividbackups/drmohsinazeem.com_wpvivid-66c44e45dc950_2024-08-20-08-05_backup_all.zip' '/home/makmfewe/drshahidchudhary.com/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]] '/home/makmfewe/drshahidchudhary.com/wp-content/plugins/selection-lite/src/Merkulove/Unity/PluginHelper.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/drshahidchudhary.com/wp-content/plugins/selection-lite/src/Merkulove/Unity/Settings.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/gbfc.us/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]] '/home/makmfewe/gbfc.us/wp-content/plugins/give/includes/misc-functions.php' # Universal decode regex match = [universal decoder] # Scan Timeout (30 secs) while processing: '/home/makmfewe/gbfc.us/wp-content/themes/chursy/install-resource/plugins/revslider.zip' '/home/makmfewe/globalindustrialsolution.org/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]] '/home/makmfewe/globalindustrialsolution.org/wp-content/plugins/click-to-chat-for-whatsapp/new/admin/class-ht-ctc-admin-main-page.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/globalindustrialsolution.org/wp-content/plugins/siteseo/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/globalindustrialsolution.org/wp-content/plugins/siteseo/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/hsec.com.pk/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]] '/home/makmfewe/hsec.com.pk/wp-content/uploads' # World writeable directory '/home/makmfewe/hsec.com.pk/wp-content/uploads/2023' # World writeable directory '/home/makmfewe/hsec.com.pk/wp-content/uploads/2023/09' # World writeable directory '/home/makmfewe/hsec.com.pk/wp-content/uploads/2023/10' # World writeable directory '/home/makmfewe/hsec.com.pk/wp-content/uploads/2023/11' # World writeable directory '/home/makmfewe/hsec.com.pk/wp-content/uploads/2023/12' # World writeable directory '/home/makmfewe/hsec.com.pk/wp-content/uploads/2024' # World writeable directory '/home/makmfewe/hsec.com.pk/wp-content/uploads/2024/01' # World writeable directory '/home/makmfewe/hsec.com.pk/wp-content/uploads/2024/02' # World writeable directory '/home/makmfewe/hsec.com.pk/wp-content/uploads/2024/03' # World writeable directory '/home/makmfewe/hsec.com.pk/wp-content/uploads/2024/04' # World writeable directory '/home/makmfewe/hsec.com.pk/wp-content/uploads/2024/05' # World writeable directory '/home/makmfewe/hsec.com.pk/wp-content/uploads/2024/06' # World writeable directory '/home/makmfewe/hsec.com.pk/wp-content/uploads/2024/07' # World writeable directory '/home/makmfewe/hsec.com.pk/wp-content/uploads/2024/08' # World writeable directory '/home/makmfewe/hsec.com.pk/wp-content/uploads/2024/09' # World writeable directory '/home/makmfewe/hsec.com.pk/wp-content/uploads/2024/10' # World writeable directory '/home/makmfewe/hsec.com.pk/wp-content/uploads/2024/11' # World writeable directory '/home/makmfewe/hsec.com.pk/wp-content/uploads/2024/12' # World writeable directory '/home/makmfewe/hsec.com.pk/wp-content/uploads/2025' # World writeable directory '/home/makmfewe/hsec.com.pk/wp-content/uploads/2025/01' # World writeable directory '/home/makmfewe/hsec.com.pk/wp-content/uploads/2025/02' # World writeable directory '/home/makmfewe/hsec.com.pk/wp-content/uploads/2025/03' # World writeable directory '/home/makmfewe/hsec.com.pk/wp-content/uploads/2025/04' # World writeable directory '/home/makmfewe/hsec.com.pk/wp-content/uploads/elementor' # World writeable directory '/home/makmfewe/hsec.com.pk/wp-content/uploads/elementor/css' # World writeable directory '/home/makmfewe/hsec.com.pk/wp-content/uploads/elementor/google-fonts' # World writeable directory '/home/makmfewe/hsec.com.pk/wp-content/uploads/elementor/google-fonts/css' # World writeable directory '/home/makmfewe/hsec.com.pk/wp-content/uploads/elementor/google-fonts/fonts' # World writeable directory '/home/makmfewe/hsec.com.pk/wp-content/uploads/elementor/thumbs' # World writeable directory '/home/makmfewe/hsec.com.pk/wp-content/uploads/template-kits' # World writeable directory '/home/makmfewe/ibnearif.com/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]] '/home/makmfewe/ibnearif.com/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/ibnearif.com/wp-content/plugins/woocommerce/src/Internal/BrandingController.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/ibnearif.com/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/ibnearif.com/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/ibnearif.com/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c' # Suspicious file type [application/x-c] '/home/makmfewe/kamrancomputer.com/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]] '/home/makmfewe/kamrancomputer.com/wp-content/plugins/google-listings-and-ads/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/kamrancomputer.com/wp-content/plugins/google-listings-and-ads/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/kamrancomputer.com/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-masterbar/src/admin-menu/class-admin-menu.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/kamrancomputer.com/wp-content/plugins/mailpoet/lib/Config/Menu.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/kamrancomputer.com/wp-content/plugins/mailpoet/vendor/mailpoet/email-editor/vendor/soundasleep/html2text/tests/html/blockquotes.html' # Suspicious file type [application/x-c] '/home/makmfewe/kamrancomputer.com/wp-content/plugins/mailpoet/vendor/mailpoet/email-editor/vendor/soundasleep/html2text/tests/html/pre.html' # Suspicious file type [application/x-c] '/home/makmfewe/kamrancomputer.com/wp-content/plugins/simple-chat-button/includes/frontend.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/kamrancomputer.com/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/kamrancomputer.com/wp-content/plugins/woocommerce/src/Internal/BrandingController.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/kamrancomputer.com/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/kamrancomputer.com/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/kamrancomputer.com/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c' # Suspicious file type [application/x-c] # Scan Timeout (30 secs) while processing: '/home/makmfewe/kamrancomputer.com/wp-content/plugins/wp-whatsapp-chat/build/new-admin-menu/js/index.js' '/home/makmfewe/kamrancomputer.com/wp-content/themes/mem/123.php' # Universal decode regex match = [universal decoder] # (decoded file [depth: 1]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2194]] '/home/makmfewe/kamrancomputer.com/wp-content/themes/mem/homes.zip' # (compressed file: 113.php [depth: 1]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]] # (compressed file: 123.php [depth: 1]) Universal decode regex match = [universal decoder] # (compressed file: 123.php [depth: 1]) (decoded file [depth: 1]) Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P2194]] # (compressed file: mydb.php [depth: 1]) Regular expression match = [\n(?!\s*(//|\#|\*)).*/etc/passwd] # (compressed file: mydb.php [depth: 1]) Regular expression match = [/etc/valiases/] # (compressed file: mydb.php [depth: 1]) (decoded file [depth: 0]) Regular expression match = [\n(?!\s*(//|\#|\*)).*/etc/passwd] # (compressed file: mydb.php [depth: 1]) (decoded file [depth: 0]) Regular expression match = [/etc/valiases/] '/home/makmfewe/kamrancomputer.com/wp-content/themes/mem/mydb.php' # Regular expression match = [\n(?!\s*(//|\#|\*)).*/etc/passwd] # Regular expression match = [/etc/valiases/] # (decoded file [depth: 0]) Regular expression match = [\n(?!\s*(//|\#|\*)).*/etc/passwd] # (decoded file [depth: 0]) Regular expression match = [/etc/valiases/] '/home/makmfewe/kneespine.com/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]] '/home/makmfewe/kneespine.com/wp-content/plugins/selection-lite/src/Merkulove/Unity/PluginHelper.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/kneespine.com/wp-content/plugins/selection-lite/src/Merkulove/Unity/Settings.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/learningladder.academy/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]] # Scan Timeout (30 secs) while processing: '/home/makmfewe/mail/mercurylondon.com/k.haider/.Sent/cur/1742910756.M926192P2626415.business141.web-hosting.com,S=10049027,W=10179869:2,S' # Scan Timeout (30 secs) while processing: '/home/makmfewe/mail/mercurylondon.com/k.haider/cur/1710547262.M230545P2881519.premium127.web-hosting.com,S=15809350,W=16014870:2,S' # Scan Timeout (30 secs) while processing: '/home/makmfewe/mail/mercurylondon.com/k.haider/cur/1716888997.M345303P3172407.premium127.web-hosting.com,S=9302458,W=9423443:2,Sbc' # Scan Timeout (30 secs) while processing: '/home/makmfewe/mail/mercurylondon.com/k.haider/cur/1726568981.M597418P2702614.premium127.web-hosting.com,S=9961251,W=10090682:2,S' # Scan Timeout (30 secs) while processing: '/home/makmfewe/mail/mercurylondon.com/k.haider/cur/1729000715.M652862P2561436.premium127.web-hosting.com,S=27156267,W=27509209:2,S' # Scan Timeout (30 secs) while processing: '/home/makmfewe/mail/mercurylondon.com/k.haider/cur/1730206918.M657070P2801009.premium127.web-hosting.com,S=7139831,W=7233056:2,S' # Scan Timeout (30 secs) while processing: '/home/makmfewe/mail/mercurylondon.com/k.haider/cur/1731929044.M633061P3407302.premium127.web-hosting.com,S=9596534,W=9735634:2,S' # Scan Timeout (30 secs) while processing: '/home/makmfewe/mail/mercurylondon.com/k.haider/cur/1734602775.M662961P180834.business141.web-hosting.com,S=5693414,W=5767553:2,RS' # Scan Timeout (30 secs) while processing: '/home/makmfewe/mail/mercurylondon.com/k.haider/cur/1736434418.M177485P2963941.business141.web-hosting.com,S=17175618,W=17398752:2,S' # Scan Timeout (30 secs) while processing: '/home/makmfewe/mail/mercurylondon.com/k.haider/cur/1737544245.M394737P1189046.business141.web-hosting.com,S=27871874,W=28234680:2,S' # Scan Timeout (30 secs) while processing: '/home/makmfewe/mail/mercurylondon.com/k.haider/cur/1739960880.M699521P3774289.business141.web-hosting.com,S=43588475,W=44154613:2,S' # Scan Timeout (30 secs) while processing: '/home/makmfewe/mail/mercurylondon.com/k.haider/cur/1739961222.M566175P3807505.business141.web-hosting.com,S=8275544,W=8383062:2,S' # Scan Timeout (30 secs) while processing: '/home/makmfewe/mail/mercurylondon.com/k.haider/cur/1739961327.M199790P3774289.business141.web-hosting.com,S=35547462,W=36009157:2,S' # Scan Timeout (30 secs) while processing: '/home/makmfewe/mail/mercurylondon.com/k.haider/cur/1739962693.M584689P3911943.business141.web-hosting.com,S=14407301,W=14594524:2,S' # Scan Timeout (30 secs) while processing: '/home/makmfewe/mail/mercurylondon.com/k.haider/cur/1739970992.M728857P275833.business141.web-hosting.com,S=12276698,W=12436318:2,S' # Scan Timeout (30 secs) while processing: '/home/makmfewe/mail/mercurylondon.com/k.haider/cur/1740580683.M43068P1743132.business141.web-hosting.com,S=2540616,W=2574272:2,S' # Scan Timeout (30 secs) while processing: '/home/makmfewe/mail/mercurylondon.com/k.haider/cur/1742532599.M175040P558640.business141.web-hosting.com,S=10532433,W=10669613:2,RS' '/home/makmfewe/memontravelservices.com/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]] '/home/makmfewe/memontravelservices.com/wp-content/plugins/click-to-chat-for-whatsapp/new/admin/class-ht-ctc-admin-main-page.php' # Universal decode regex match = [universal decoder] # Scan Timeout (30 secs) while processing: '/home/makmfewe/memontravelservices.com/wp-content/uploads/template-kits/c33250fe9a06a5f3212317dd904011c7/source-82.zip' '/home/makmfewe/mercurylondon.com/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]] '/home/makmfewe/mercurylondon.com/wp-content/uploads' # World writeable directory '/home/makmfewe/mercurylondon.com/wp-content/uploads/2024' # World writeable directory '/home/makmfewe/mercurylondon.com/wp-content/uploads/2024/01' # World writeable directory '/home/makmfewe/mercurylondon.com/wp-content/uploads/2024/02' # World writeable directory '/home/makmfewe/mercurylondon.com/wp-content/uploads/2024/03' # World writeable directory '/home/makmfewe/mercurylondon.com/wp-content/uploads/2024/04' # World writeable directory '/home/makmfewe/mercurylondon.com/wp-content/uploads/2024/05' # World writeable directory '/home/makmfewe/mercurylondon.com/wp-content/uploads/2024/06' # World writeable directory '/home/makmfewe/mercurylondon.com/wp-content/uploads/2024/07' # World writeable directory '/home/makmfewe/mercurylondon.com/wp-content/uploads/2024/08' # World writeable directory '/home/makmfewe/mercurylondon.com/wp-content/uploads/2024/09' # World writeable directory '/home/makmfewe/mercurylondon.com/wp-content/uploads/2024/10' # World writeable directory '/home/makmfewe/mercurylondon.com/wp-content/uploads/2024/11' # World writeable directory '/home/makmfewe/mercurylondon.com/wp-content/uploads/2024/12' # World writeable directory '/home/makmfewe/mercurylondon.com/wp-content/uploads/2025' # World writeable directory '/home/makmfewe/mercurylondon.com/wp-content/uploads/2025/01' # World writeable directory '/home/makmfewe/mercurylondon.com/wp-content/uploads/2025/02' # World writeable directory '/home/makmfewe/mercurylondon.com/wp-content/uploads/2025/03' # World writeable directory '/home/makmfewe/mercurylondon.com/wp-content/uploads/2025/04' # World writeable directory '/home/makmfewe/mercurylondon.com/wp-content/uploads/elementor' # World writeable directory '/home/makmfewe/mercurylondon.com/wp-content/uploads/elementor/css' # World writeable directory '/home/makmfewe/mercurylondon.com/wp-content/uploads/elementor/google-fonts' # World writeable directory '/home/makmfewe/mercurylondon.com/wp-content/uploads/elementor/google-fonts/css' # World writeable directory '/home/makmfewe/mercurylondon.com/wp-content/uploads/elementor/google-fonts/fonts' # World writeable directory '/home/makmfewe/mercurylondon.com/wp-content/uploads/elementor/thumbs' # World writeable directory '/home/makmfewe/mercurylondon.com/wp-content/uploads/template-kits' # World writeable directory '/home/makmfewe/mercurylondon.com/wp-content/uploads/template-kits/8a7c543b3a517dc45afb1435351670f5' # World writeable directory '/home/makmfewe/mercurylondon.com/wp-content/uploads/wpforms' # World writeable directory '/home/makmfewe/mercurylondon.com/wp-content/uploads/wpforms/cache' # World writeable directory '/home/makmfewe/mercurylondon.com/wp-content/uploads/wpforms/themes' # World writeable directory '/home/makmfewe/mianoorproperties.com/wp-content/plugins/akismet/akismet.php' # Script version check [OLD] [Akismet Anti-spam: Spam Protection v5.3.5 < v5.3.7] '/home/makmfewe/mianoorproperties.com/wp-content/plugins/click-to-chat-for-whatsapp/click-to-chat.php' # Script version check [OLD] [Click to Chat v4.14 < v4.19] '/home/makmfewe/mianoorproperties.com/wp-content/plugins/click-to-chat-for-whatsapp/new/admin/class-ht-ctc-admin-main-page.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/mianoorproperties.com/wp-content/plugins/elementor/elementor.php' # Script version check [OLD] [Elementor v3.26.3 < v3.27.6] '/home/makmfewe/mianoorproperties.com/wp-content/plugins/loginizer/loginizer.php' # Script version check [OLD] [Loginizer v1.9.6 < v1.9.8] '/home/makmfewe/mianoorproperties.com/wp-includes/version.php' # Script version check [OLD] [Wordpress v6.7.1 < v6.7.2] '/home/makmfewe/mianoorproperties.com/wp-includes/images/media/index.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]] '/home/makmfewe/mianoorproperties.com/wp-includes/sodium_compat/namespaced/wp-login.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]] '/home/makmfewe/public_html/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]] '/home/makmfewe/public_html/gillindustry/admin.php' # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]] '/home/makmfewe/public_html/gillindustry/wp-content/uploads/rometheme_template' # World writeable directory '/home/makmfewe/public_html/wp-content/plugins/forminator/addons/pro/googlesheet/lib/external/vendor-prefixed/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/public_html/wp-content/plugins/forminator/addons/pro/googlesheet/lib/external/vendor-prefixed/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/public_html/wp-content/plugins/meta-box/inc/about/about.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/public_html/wp-content/plugins/meta-box/src/Dashboard/Dashboard.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/public_html/wp-content/uploads' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2019' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2019/10' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2019/11' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2019/12' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2020' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2020/02' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2020/03' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2020/09' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2020/10' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2023' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2023/01' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2023/02' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2023/03' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2023/04' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2023/05' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2023/06' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2023/07' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2023/08' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2023/09' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2023/10' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2023/11' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2023/12' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2024' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2024/01' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2024/02' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2024/03' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2024/04' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2024/05' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2024/06' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2024/07' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2024/08' # World writeable directory # Scan Timeout (30 secs) while processing: '/home/makmfewe/public_html/wp-content/uploads/2024/08/9255258-uhd_3840_2160_24fps.mp4' '/home/makmfewe/public_html/wp-content/uploads/2024/09' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2024/10' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2024/11' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2024/12' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2025' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2025/01' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2025/02' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2025/03' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/2025/04' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/demo_files' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/elementor' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/elementor/css' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/elementor/google-fonts' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/elementor/google-fonts/css' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/elementor/google-fonts/fonts' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/elementor/thumbs' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/elementor/tmp' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/template-kits' # World writeable directory '/home/makmfewe/public_html/wp-content/uploads/wpcf7_uploads' # World writeable directory '/home/makmfewe/pwmsolution.com/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]] '/home/makmfewe/sh-fragrances.com/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]] '/home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php' # Universal decode regex match = [universal decoder] # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version2/class-wc-rest-payment-gateways-v2-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version2/class-wc-rest-product-attribute-terms-v2-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version2/class-wc-rest-product-attributes-v2-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version2/class-wc-rest-product-brands-v2-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version2/class-wc-rest-product-categories-v2-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version2/class-wc-rest-product-reviews-v2-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version2/class-wc-rest-product-shipping-classes-v2-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version2/class-wc-rest-product-tags-v2-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version2/class-wc-rest-product-variations-v2-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version2/class-wc-rest-products-v2-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version2/class-wc-rest-report-sales-v2-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version2/class-wc-rest-report-top-sellers-v2-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version2/class-wc-rest-reports-v2-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version2/class-wc-rest-setting-options-v2-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version2/class-wc-rest-settings-v2-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version2/class-wc-rest-shipping-methods-v2-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version2/class-wc-rest-shipping-zone-locations-v2-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version2/class-wc-rest-shipping-zone-methods-v2-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version2/class-wc-rest-shipping-zones-v2-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version2/class-wc-rest-system-status-tools-v2-controller.php]: Connection refused # Clamd Error for [SCAN /tmp/cxs_BqaBKh5qHJW4WplZe6rteGx7eZag.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version2/class-wc-rest-system-status-v2-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version2/class-wc-rest-tax-classes-v2-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version2/class-wc-rest-taxes-v2-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version2/class-wc-rest-webhook-deliveries-v2-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version2/class-wc-rest-webhooks-v2-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version3/class-wc-rest-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version3/class-wc-rest-coupons-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version3/class-wc-rest-crud-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version3/class-wc-rest-customer-downloads-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version3/class-wc-rest-customers-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version3/class-wc-rest-data-continents-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version3/class-wc-rest-data-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version3/class-wc-rest-data-countries-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version3/class-wc-rest-data-currencies-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version3/class-wc-rest-layout-templates-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version3/class-wc-rest-network-orders-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version3/class-wc-rest-order-notes-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version3/class-wc-rest-order-refunds-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version3/class-wc-rest-orders-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version3/class-wc-rest-payment-gateways-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version3/class-wc-rest-posts-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version3/class-wc-rest-product-attribute-terms-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version3/class-wc-rest-product-attributes-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version3/class-wc-rest-product-brands-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version3/class-wc-rest-product-categories-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version3/class-wc-rest-product-custom-fields-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version3/class-wc-rest-product-reviews-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version3/class-wc-rest-product-shipping-classes-controller.php]: Connection refused # Clamd Error for [SCAN /home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/includes/rest-api/Controllers/Version3/class-wc-rest-product-tags-controller.php]: Connection refused '/home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/src/Internal/BrandingController.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/sh-fragrances.com/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c' # Suspicious file type [application/x-c] # Scan Timeout (30 secs) while processing: '/home/makmfewe/sh-fragrances.com/wp-content/themes/neytri/modules/plugins/neytri-pro.zip' # Scan Timeout (30 secs) while processing: '/home/makmfewe/sh-fragrances.com/wp-content/themes/neytri/modules/plugins/wdt-demo-importer.zip' '/home/makmfewe/skillstudio27.com/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]] '/home/makmfewe/skillstudio27.com/wp-content/plugins/bdthemes-element-pack-lite/admin/admin-settings.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/skillstudio27.com/wp-content/plugins/click-to-chat-for-whatsapp/new/admin/class-ht-ctc-admin-main-page.php' # Universal decode regex match = [universal decoder] # Scan Timeout (30 secs) while processing: '/home/makmfewe/skillstudio27.com/wp-content/uploads/2025/01/living-Bedrooms-1.mp4' # Scan Timeout (30 secs) while processing: '/home/makmfewe/skillstudio27.com/wp-content/uploads/2025/01/living-Bedrooms.mp4' # Scan Timeout (30 secs) while processing: '/home/makmfewe/skillstudio27.com/wp-content/uploads/2025/01/projects.mp4' # Scan Timeout (30 secs) while processing: '/home/makmfewe/skillstudio27.com/wp-content/uploads/template-kits/48499d101dda0a31135281a455f98267/source-9.zip' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_16613.2025-04-09_05-18-53.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_16613.2025-04-13_04-37-24.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_16860.2025-03-20_04-42-34.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_16860.2025-03-24_04-27-34.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_18327.2025-04-09_05-19-38.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_18327.2025-04-13_04-37-33.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_21747.2025-04-09_05-19-51.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_21747.2025-04-11_04-55-52.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_22962.2025-04-11_04-54-11.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_22962.2025-04-15_05-55-34.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_26763.2025-04-09_05-19-18.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_26763.2025-04-13_04-37-26.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_26763.2025-04-15_05-55-05.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_32556.2025-04-12_04-25-43.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_46008.2025-04-12_04-25-43.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_46008.2025-04-15_05-59-00.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_48896.2025-04-12_04-25-44.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_58311.2025-04-09_05-21-00.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_65306.2025-04-11_04-56-03.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_65306.2025-04-13_04-37-57.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_65586.2025-04-12_04-25-53.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_65586.2025-04-13_04-39-20.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_68319.2025-04-02_04-53-57.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_68319.2025-04-09_05-21-02.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_68319.2025-04-15_05-58-57.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_81188.2025-04-09_05-22-11.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_81188.2025-04-13_04-39-04.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_81351.2025-04-15_05-59-56.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_83895.2025-04-11_04-58-45.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_86363.2025-04-09_05-22-09.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_86363.2025-04-12_04-25-52.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_95080.2025-04-11_04-59-13.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_98205.2025-04-11_04-58-45.tar.gz' # Scan Timeout (30 secs) while processing: '/home/makmfewe/softaculous_backups/wp.26_98205.2025-04-13_04-38-04.tar.gz' '/home/makmfewe/ufoodspvtltd.com/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]] '/home/makmfewe/ufoodspvtltd.com/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/ufoodspvtltd.com/wp-content/plugins/woocommerce/src/Internal/BrandingController.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/ufoodspvtltd.com/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/ufoodspvtltd.com/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/ufoodspvtltd.com/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c' # Suspicious file type [application/x-c] '/home/makmfewe/ufoodspvtltd.com/wp-content/uploads' # World writeable directory '/home/makmfewe/ufoodspvtltd.com/wp-content/uploads/2024' # World writeable directory '/home/makmfewe/ufoodspvtltd.com/wp-content/uploads/2024/02' # World writeable directory '/home/makmfewe/ufoodspvtltd.com/wp-content/uploads/2024/03' # World writeable directory '/home/makmfewe/ufoodspvtltd.com/wp-content/uploads/2024/04' # World writeable directory '/home/makmfewe/ufoodspvtltd.com/wp-content/uploads/2024/05' # World writeable directory '/home/makmfewe/ufoodspvtltd.com/wp-content/uploads/2024/06' # World writeable directory '/home/makmfewe/ufoodspvtltd.com/wp-content/uploads/2024/07' # World writeable directory '/home/makmfewe/ufoodspvtltd.com/wp-content/uploads/2024/08' # World writeable directory '/home/makmfewe/ufoodspvtltd.com/wp-content/uploads/2024/09' # World writeable directory '/home/makmfewe/ufoodspvtltd.com/wp-content/uploads/2024/10' # World writeable directory '/home/makmfewe/ufoodspvtltd.com/wp-content/uploads/2024/11' # World writeable directory '/home/makmfewe/ufoodspvtltd.com/wp-content/uploads/2024/12' # World writeable directory '/home/makmfewe/ufoodspvtltd.com/wp-content/uploads/2025' # World writeable directory '/home/makmfewe/ufoodspvtltd.com/wp-content/uploads/2025/01' # World writeable directory '/home/makmfewe/ufoodspvtltd.com/wp-content/uploads/2025/02' # World writeable directory '/home/makmfewe/ufoodspvtltd.com/wp-content/uploads/2025/03' # World writeable directory '/home/makmfewe/ufoodspvtltd.com/wp-content/uploads/2025/04' # World writeable directory '/home/makmfewe/ufoodspvtltd.com/wp-content/uploads/elementor' # World writeable directory '/home/makmfewe/ufoodspvtltd.com/wp-content/uploads/elementor/css' # World writeable directory '/home/makmfewe/ufoodspvtltd.com/wp-content/uploads/elementor/google-fonts' # World writeable directory '/home/makmfewe/ufoodspvtltd.com/wp-content/uploads/elementor/google-fonts/css' # World writeable directory '/home/makmfewe/ufoodspvtltd.com/wp-content/uploads/elementor/google-fonts/fonts' # World writeable directory '/home/makmfewe/ufoodspvtltd.com/wp-content/uploads/elementor/thumbs' # World writeable directory '/home/makmfewe/ufoodspvtltd.com/wp-content/uploads/template-kits' # World writeable directory '/home/makmfewe/ufoodspvtltd.com/wp-content/uploads/template-kits/0bdd3947f93e863489f97b6120d78cc8' # World writeable directory '/home/makmfewe/ufoodspvtltd.com/wp-content/uploads/wc-logs' # World writeable directory '/home/makmfewe/ufoodspvtltd.com/wp-content/uploads/woocommerce_uploads' # World writeable directory '/home/makmfewe/zeestudy.com/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1425]] '/home/makmfewe/zeestudy.com/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/zeestudy.com/wp-content/plugins/woocommerce/src/Internal/BrandingController.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/zeestudy.com/wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/zeestudy.com/wp-content/plugins/woocommerce/src/Internal/Admin/Settings/PaymentsController.php' # Universal decode regex match = [universal decoder] '/home/makmfewe/zeestudy.com/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c' # Suspicious file type [application/x-c] '/home/makmfewe/zeestudy.com/wp-includes/version.php' # Script version check [OLD] [Wordpress v6.7.1 < v6.7.2] ----------- SCAN SUMMARY ----------- Scanned directories: 63116 Scanned files: 515860 Ignored items: 1713 Suspicious matches: 312 Viruses found: 0 Fingerprint matches: 29 Data scanned: 19996.17 MB Scan peak memory: 414604 kB Scan time/item: 0.146 sec Scan time: 84783.632 sec