Current File : /home/lastyfjz/scanreport-lastyfjz-Aug_02_2025_08h06m.txt

----------- SCAN REPORT -----------
TimeStamp: Sat, 2 Aug 2025 08:06:49 -0400
(/usr/sbin/cxs --background --clamdsock /var/clamd --dbreport --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 50000 --noforce --html --ignore /etc/cxs/cxs.ignore.manual --options mMOLfSGchexdnwZDRru --noprobability --qoptions Mv --report /home/lastyfjz/scanreport-lastyfjz-Aug_02_2025_08h06m.txt --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --unofficial --user lastyfjz --virusscan --vmrssmax 2000000 --waitscan 0 --xtra /etc/cxs/cxs.xtra.manual)


Scanning /home/lastyfjz:

'/home/lastyfjz/.config/htop/defunct'
# Linux Binary/Executable [application/x-sharedlib]

'/home/lastyfjz/.nc_plugin/hidden'
# World writeable directory

'/home/lastyfjz/dermalaserclinic.co.uk/index.php_old'
# Universal decode regex match = [universal decoder]

'/home/lastyfjz/dermalaserclinic.co.uk/.tmb'
# World writeable directory

'/home/lastyfjz/dermalaserclinic.co.uk/wp-content/plugins/contact-form-7/includes/css/autogs.php'
# ClamAV detected virus = [{HEX}php.base64.inject.182.UNOFFICIAL]

'/home/lastyfjz/dermalaserclinic.co.uk/wp-content/plugins/contact-form-7/includes/css/index.php'
# ClamAV detected virus = [{HEX}php.nested.base64.652.UNOFFICIAL]

'/home/lastyfjz/dermalaserclinic.co.uk/wp-content/plugins/file-manager-advanced/application/library/codemirror/mode/clike/index.html'
# Suspicious file type [application/x-c]

'/home/lastyfjz/dermalaserclinic.co.uk/wp-content/plugins/fonts/fonts.php'
# Known exploit = [Fingerprint Match (fp)] [PHP Upload Exploit [P0834]]

'/home/lastyfjz/dermalaserclinic.co.uk/wp-content/plugins/google-analytics-for-wordpress/includes/helpers.php'
# Universal decode regex match = [universal decoder]

'/home/lastyfjz/dermalaserclinic.co.uk/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/lastyfjz/dermalaserclinic.co.uk/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/lastyfjz/dermalaserclinic.co.uk/wp-content/plugins/otter-blocks/inc/plugins/class-dashboard.php'
# Universal decode regex match = [universal decoder]

'/home/lastyfjz/dermalaserclinic.co.uk/wp-content/plugins/pwnd-1/pwnd.php'
# Known exploit = [Fingerprint Match (fp)] [PHP Upload Exploit [P0834]]

'/home/lastyfjz/dermalaserclinic.co.uk/wp-content/plugins/so-pinyin-slugs/inc/main_json.php'
# (decoded file [depth: 0]) Known exploit = [Fingerprint Match (fp)] [PHP cPanel Exploit [P0100]]

'/home/lastyfjz/dermalaserclinic.co.uk/wp-content/plugins/wp-mail-smtp/src/Admin/Area.php'
# Universal decode regex match = [universal decoder]

'/home/lastyfjz/dermalaserclinic.co.uk/wp-content/plugins/wp-mail-smtp/src/Admin/SetupWizard.php'
# Universal decode regex match = [universal decoder]

'/home/lastyfjz/dermalaserclinic.co.uk/wp-content/themes/theme-check/main.php'
# (decoded file [depth: 0]) Known exploit = [Fingerprint Match (fp)] [PHP cPanel Exploit [P0100]]

'/home/lastyfjz/dermalaserclinic.co.uk/wp-content/themes/theme-check/theme-check.php'
# ClamAV detected virus = [TO-27921.WEBSHELL.filemanager2_php_filemanager_without_any_authentication_notags_html.MD5-63f115242a9690ecd364302a8c5108d6-11249.UNOFFICIAL]

'/home/lastyfjz/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php'
# Universal decode regex match = [universal decoder]

----------- SCAN SUMMARY -----------
Scanned directories: 7123
Scanned files: 41329
Ignored items: 129
Suspicious matches: 19
Viruses found: 3
Fingerprint matches: 4
Data scanned: 5050.05 MB
Scan peak memory: 391900 kB
Scan time/item: 0.020 sec
Scan time: 970.411 sec