File manager

Warning: file_get_contents(https://raw.githubusercontent.com/Den1xxx/Filemanager/master/languages/ru.json): Failed to open stream: HTTP request failed! HTTP/1.1 404 Not Found in /home/thesacih/biosquest.com/site.php on line 107
File manager

File manager - Edit - /home/thesacih/scanreport-thesacih-May_22_2025_05h31m.txt

Back
----------- SCAN REPORT ----------- TimeStamp: Thu, 22 May 2025 05:31:13 -0400 (/usr/sbin/cxs --background --clamdsock /var/clamd --dbreport --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 50000 --noforce --html --ignore /etc/cxs/cxs.ignore.manual --options mMOLfSGchexdnwZDRru --noprobability --qoptions Mv --report /home/thesacih/scanreport-thesacih-May_22_2025_05h31m.txt --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --unofficial --user thesacih --virusscan --vmrssmax 2000000 --waitscan 0 --xtra /etc/cxs/cxs.xtra.manual) Scanning /home/thesacih: '/home/thesacih/.nc_plugin/hidden' # World writeable directory '/home/thesacih/13cabvictoria.com.au/wp-content/themes/astra/admin/includes/class-astra-menu.php' # Universal decode regex match = [universal decoder] '/home/thesacih/biographyhunk.com/wp-content/plugins/fast-indexing-api/vendor/google/apiclient-services/src/src.css' # Universal decode regex match = [universal decoder] '/home/thesacih/biosdesk.com/.tmb' # World writeable directory '/home/thesacih/biosquest.com/.tmb' # World writeable directory '/home/thesacih/celebrichlist.com/wp-admin/moderation-base.php' # Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit] '/home/thesacih/celebrichlist.com/wp-content/plugins/disable-everything/index-num.php' # Known exploit = [Fingerprint Match (md5)] [PHP Upload Exploit] '/home/thesacih/celebrichlist.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/thesacih/celebrichlist.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/thesacih/celebrichlist.com/wp-content/themes/smart-mag/index-base.php' # Known exploit = [Fingerprint Match (md5)] [PHP Upload Exploit] # Scan Timeout (30 secs) while processing: '/home/thesacih/celebrichlist.com/wp-content/themes/smart-mag/lib/vendor/plugins/bunyad-amp.zip' '/home/thesacih/celebrichlist.com/wp-includes/class-wp-block-type-registry-sql.php' # Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit] '/home/thesacih/celebrichlist.com/wp-includes/css/output_script.php' # Universal decode regex match = [universal decoder] '/home/thesacih/celebshack.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/thesacih/celebshack.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/thesacih/celebshack.com/wp-content/plugins/litespeed-cache/guest.vary-stack.php' # Known exploit = [Fingerprint Match (md5)] [PHP Upload Exploit] '/home/thesacih/celebshack.com/wp-includes/certificates/output_script.php' # Universal decode regex match = [universal decoder] '/home/thesacih/celebshack.com/wp-includes/fonts/output_script.php' # Universal decode regex match = [universal decoder] '/home/thesacih/celebshost.com/cache.php' # (decoded file [depth: 0]) ClamAV detected virus = [TO-27921.WEBSHELL.filemanager2_php_filemanager_without_any_authentication_notags_html.MD5-63f115242a9690ecd364302a8c5108d6-11249.UNOFFICIAL] '/home/thesacih/celebshost.com/wp-links-header.php' # (decoded file [depth: 0]) ClamAV detected virus = [TO-27921.WEBSHELL.filemanager2_php_filemanager_without_any_authentication_notags_html.MD5-63f115242a9690ecd364302a8c5108d6-11249.UNOFFICIAL] '/home/thesacih/celebshost.com/.tmb' # World writeable directory '/home/thesacih/celebshost.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/thesacih/celebshost.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/thesacih/celebshost.com/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html' # Suspicious file type [application/x-c] '/home/thesacih/celebshost.com/wp-includes/certificates/output_script.php' # Universal decode regex match = [universal decoder] '/home/thesacih/celebshost.com/wp-includes/fonts/output_script.php' # Universal decode regex match = [universal decoder] '/home/thesacih/celebzones.com/wp-admin/includes/class-wp-community-events-merge.php' # Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit] '/home/thesacih/celebzones.com/wp-includes/SimplePie/output_script.php' # Universal decode regex match = [universal decoder] '/home/thesacih/celebzones.com/wp-includes/fonts/output_script.php' # Universal decode regex match = [universal decoder] '/home/thesacih/celebzones.com/wp-includes/html-api/class-wp-html-attribute-token-ajax-response.php' # Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit] '/home/thesacih/celebzspot.com/wp-links-header.php' # (decoded file [depth: 0]) ClamAV detected virus = [TO-27921.WEBSHELL.filemanager2_php_filemanager_without_any_authentication_notags_html.MD5-63f115242a9690ecd364302a8c5108d6-11249.UNOFFICIAL] '/home/thesacih/celebzspot.com/wp-admin/link-manager-path.php' # Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit] '/home/thesacih/celebzspot.com/wp-content/plugins/all-in-one-wp-migration-src/loader-condition.php' # Known exploit = [Fingerprint Match (md5)] [PHP Upload Exploit] '/home/thesacih/celebzspot.com/wp-content/themes/newspaperex/functions-alpha.php' # Known exploit = [Fingerprint Match (md5)] [PHP Upload Exploit] '/home/thesacih/celebzspot.com/wp-includes/block-patterns/social-links-shared-background-color-old.php' # Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit] '/home/thesacih/celebzspot.com/wp-includes/images/output_script.php' # Universal decode regex match = [universal decoder] '/home/thesacih/celebzspot.com/wp-includes/rest-api/output_script.php' # Universal decode regex match = [universal decoder] '/home/thesacih/ecorenew.uk/wp-admin/includes/theme-other.php' # Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit] '/home/thesacih/ecorenew.uk/wp-content/themes/astra/admin/includes/class-astra-menu.php' # Universal decode regex match = [universal decoder] '/home/thesacih/ecorenew.uk/wp-includes/class-wp-user-meta-session-tokens-exception.php' # Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit] '/home/thesacih/ecorenew.uk/wp-includes/images/output_script.php' # Universal decode regex match = [universal decoder] '/home/thesacih/ecorenew.uk/wp-includes/rest-api/output_script.php' # Universal decode regex match = [universal decoder] '/home/thesacih/famehubs.com/wp-links-header.php' # (decoded file [depth: 0]) ClamAV detected virus = [TO-27921.WEBSHELL.filemanager2_php_filemanager_without_any_authentication_notags_html.MD5-63f115242a9690ecd364302a8c5108d6-11249.UNOFFICIAL] '/home/thesacih/famehubs.com/wp-admin/includes/revision-function.php' # Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit] '/home/thesacih/famehubs.com/wp-content/themes/nostalgic-blog/archive-query.php' # Known exploit = [Fingerprint Match (md5)] [PHP Upload Exploit] '/home/thesacih/famehubs.com/wp-includes/script-loader-constructor.php' # Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit] '/home/thesacih/famehubs.com/wp-includes/sitemaps/output_script.php' # Universal decode regex match = [universal decoder] '/home/thesacih/famehubs.com/wp-includes/sodium_compat/output_script.php' # Universal decode regex match = [universal decoder] '/home/thesacih/figurespoint.com/wp-content/plugins/fast-indexing-api/vendor/google/apiclient-services/src/Indexing/Indexing.css' # Universal decode regex match = [universal decoder] '/home/thesacih/fortunehubs.com/.tmb' # World writeable directory '/home/thesacih/fortunehubs.com/wp-admin/includes/class-automatic-upgrader-skin-framework.php' # Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit] '/home/thesacih/fortunehubs.com/wp-content/plugins/litespeed-cache/litespeed-cache-integer.php' # Known exploit = [Fingerprint Match (md5)] [PHP Upload Exploit] '/home/thesacih/fortunehubs.com/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html' # Suspicious file type [application/x-c] '/home/thesacih/fortunehubs.com/wp-content/themes/twentytwentyfour/functions-core.php' # Known exploit = [Fingerprint Match (md5)] [PHP Upload Exploit] '/home/thesacih/fortunehubs.com/wp-includes/IXR/class-IXR-message-http.php' # Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit] '/home/thesacih/fortunehubs.com/wp-includes/images/output_script.php' # Universal decode regex match = [universal decoder] '/home/thesacih/fortunehubs.com/wp-includes/l10n/output_script.php' # Universal decode regex match = [universal decoder] '/home/thesacih/greatteamnames.com/wp-admin/network/site-users-branch.php' # Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit] '/home/thesacih/greatteamnames.com/wp-content/plugins/sphere-core/components/adblock-detect/style.php' # ClamAV detected virus = [TO-33761.WEBSHEL.nc_style_php.MD5-2c683bfc1886f5382b0baa1f7b2f9f61.size-13847.UNOFFICIAL] '/home/thesacih/greatteamnames.com/wp-content/themes/smart-mag/single-less.php' # Known exploit = [Fingerprint Match (md5)] [PHP Upload Exploit] '/home/thesacih/greatteamnames.com/wp-includes/block-supports/shadow-event.php' # Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit] '/home/thesacih/greatteamnames.com/wp-includes/js/output_script.php' # Universal decode regex match = [universal decoder] '/home/thesacih/greatteamnames.com/wp-includes/sodium_compat/output_script.php' # Universal decode regex match = [universal decoder] '/home/thesacih/inappropriatenames.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/thesacih/inappropriatenames.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/thesacih/inappropriatenames.com/wp-includes/js/output_script.php' # Universal decode regex match = [universal decoder] '/home/thesacih/inappropriatenames.com/wp-includes/style-engine/output_script.php' # Universal decode regex match = [universal decoder] '/home/thesacih/inch-dia.com/.tmb' # World writeable directory '/home/thesacih/inch-dia.com/wp-admin/includes/class-wp-application-passwords-list-table-boolean.php' # Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit] '/home/thesacih/inch-dia.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/thesacih/inch-dia.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/thesacih/inch-dia.com/wp-content/themes/smart-mag/functions-variable.php' # Known exploit = [Fingerprint Match (md5)] [PHP Upload Exploit] '/home/thesacih/inch-dia.com/wp-content/uploads/complianz/tmp/1746273145/mpdf' # World writeable directory '/home/thesacih/inch-dia.com/wp-content/uploads/complianz/tmp/1746273145/mpdf/ttfontdata' # World writeable directory '/home/thesacih/inch-dia.com/wp-includes/class-wp-plugin-dependencies-dns.php' # Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit] '/home/thesacih/inch-dia.com/wp-includes/Requests/output_script.php' # Universal decode regex match = [universal decoder] '/home/thesacih/inch-dia.com/wp-includes/images/output_script.php' # Universal decode regex match = [universal decoder] '/home/thesacih/legendhunk.com/wp-content/plugins/fast-indexing-api/vendor/google/apiclient-services/src/src.css' # Universal decode regex match = [universal decoder] '/home/thesacih/legendhunk.com/wp-content/plugins/fast-indexing-api/vendor/google/apiclient-services/src/Indexing/Indexing.css' # Universal decode regex match = [universal decoder] '/home/thesacih/newzjournal.com/wp-content/plugins/all-in-one-seo-pack-stable/app/Common/Views/admin/settings-page.php' # Universal decode regex match = [universal decoder] '/home/thesacih/newzjournal.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/thesacih/newzjournal.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/thesacih/newzjournal.com/wp-includes/interactivity-api/output_script.php' # Universal decode regex match = [universal decoder] '/home/thesacih/newzjournal.com/wp-includes/php-compat/output_script.php' # Universal decode regex match = [universal decoder] '/home/thesacih/richstarz.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/thesacih/richstarz.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/thesacih/richstarz.com/wp-includes/version.php' # Script version check [OLD] [Wordpress v6.8 < v6.8.1] '/home/thesacih/scopebiography.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/thesacih/scopebiography.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/thesacih/scopebiography.com/wp-includes/PHPMailer/output_script.php' # Universal decode regex match = [universal decoder] '/home/thesacih/scopebiography.com/wp-includes/html-api/output_script.php' # Universal decode regex match = [universal decoder] '/home/thesacih/shiningicons.com/wp-admin/admin-functions-stat.php' # Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit] '/home/thesacih/shiningicons.com/wp-content/plugins/all-in-one-wp-migration-src/uninstall-stack.php' # Known exploit = [Fingerprint Match (md5)] [PHP Upload Exploit] '/home/thesacih/shiningicons.com/wp-content/themes/pubnews/header-alpha.php' # Known exploit = [Fingerprint Match (md5)] [PHP Upload Exploit] '/home/thesacih/shiningicons.com/wp-includes/class-wp-user-framework.php' # Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit] '/home/thesacih/shiningicons.com/wp-includes/rest-api/output_script.php' # Universal decode regex match = [universal decoder] '/home/thesacih/shiningicons.com/wp-includes/sitemaps/output_script.php' # Universal decode regex match = [universal decoder] '/home/thesacih/showbizprofiles.com/good.php' # Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1974]] '/home/thesacih/showbizprofiles.com/index.php' # Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1974]] '/home/thesacih/showbizprofiles.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/thesacih/showbizprofiles.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/thesacih/showbizprofiles.com/wp-includes/version.php' # Script version check [OLD] [Wordpress v6.8 < v6.8.1] # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp.26_13317.2025-05-19_10-56-04.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp.26_13317.2025-05-20_10-37-47.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp.26_13317.2025-05-21_10-44-49.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp.26_14278.2025-05-16_10-35-57.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp.26_14278.2025-05-19_10-56-09.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp.26_14278.2025-05-20_10-37-49.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp.26_19727.2025-05-19_10-55-57.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp.26_25803.2025-05-21_10-44-43.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp.26_29572.2025-05-19_10-55-24.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp.26_33008.2025-05-08_10-37-52.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp.26_33008.2025-05-19_10-55-18.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp.26_33008.2025-05-21_10-43-57.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp.26_35300.2025-05-19_10-56-15.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp.26_35300.2025-05-21_10-44-54.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp.26_41835.2025-05-19_10-55-57.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp.26_41835.2025-05-21_10-44-48.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp.26_49673.2025-04-28_16-08-00.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp.26_49673.2025-05-19_10-56-02.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp.26_49673.2025-05-20_10-37-46.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp.26_49673.2025-05-21_10-44-48.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp.26_55302.2025-05-13_11-05-31.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp.26_59516.2025-05-21_10-44-22.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp.26_73971.2025-05-19_10-55-50.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp.26_73971.2025-05-21_10-44-37.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp.26_74854.2025-05-21_10-44-27.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp.26_74983.2025-04-29_10-44-28.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp.26_77167.2025-05-19_10-55-56.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp.26_78106.2025-05-18_10-36-18.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp.26_78106.2025-05-19_10-56-27.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp.26_81811.2025-05-21_10-44-50.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp.26_97571.2025-05-19_10-55-42.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp.26_97571.2025-05-21_10-44-09.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp67.26_42348.2025-05-19_10-55-24.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp67.26_42348.2025-05-20_10-37-33.tar.gz' # Scan Timeout (30 secs) while processing: '/home/thesacih/softaculous_backups/wp67.26_42348.2025-05-21_10-44-00.tar.gz' '/home/thesacih/usabiographies.com/wp-content/plugins/bunyad-demo-import/vendor/awesomemotive/awesomemotive.css' # Universal decode regex match = [universal decoder] '/home/thesacih/usabiographies.com/wp-content/plugins/bunyad-demo-import/vendor/composer/composer.css' # Universal decode regex match = [universal decoder] '/home/thesacih/usabiographies.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/thesacih/usabiographies.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/thesacih/usafurtune.com/.tmb' # World writeable directory '/home/thesacih/usafurtune.com/wp-content/plugins/bunyad-demo-import/vendor/awesomemotive/wp-content-importer-v2/wp-content-importer-v2.css' # Universal decode regex match = [universal decoder] '/home/thesacih/usafurtune.com/wp-content/plugins/bunyad-demo-import/vendor/awesomemotive/wp-content-importer-v2/src/src.css' # Universal decode regex match = [universal decoder] '/home/thesacih/usafurtune.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/thesacih/usafurtune.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/thesacih/usafurtune.com/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html' # Suspicious file type [application/x-c] '/home/thesacih/usafurtune.com/wp-includes/IXR/output_script.php' # Universal decode regex match = [universal decoder] '/home/thesacih/usafurtune.com/wp-includes/fonts/output_script.php' # Universal decode regex match = [universal decoder] '/home/thesacih/usapersonalities.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/thesacih/usapersonalities.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/thesacih/usapersonalities.com/wp-content/plugins/wp-console/lib/php-7.4/vendor/symfony/console/Resources/bin/hiddeninput.exe' # MS Windows Binary/Executable [application/x-winexec] '/home/thesacih/usapersonalities.com/wp-content/plugins/wp-console/lib/php-8.0/vendor/symfony/console/Resources/bin/hiddeninput.exe' # MS Windows Binary/Executable [application/x-winexec] '/home/thesacih/usapersonalities.com/wp-includes/SimplePie/output_script.php' # Universal decode regex match = [universal decoder] '/home/thesacih/usapersonalities.com/wp-includes/php-compat/output_script.php' # Universal decode regex match = [universal decoder] '/home/thesacih/wealthyhack.com/wp-content/plugins/ad-inserter/includes/google-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/thesacih/wealthyhack.com/wp-content/plugins/ad-inserter/includes/google-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/thesacih/wealthyhack.com/wp-content/plugins/ad-inserter/includes/google-api-8/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/thesacih/wealthyhack.com/wp-content/plugins/ad-inserter/includes/google-api-8/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/thesacih/wealthyhack.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/thesacih/wealthyhack.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/thesacih/wealthyhack.com/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php' # Universal decode regex match = [universal decoder] '/home/thesacih/wealthyhack.com/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php' # Universal decode regex match = [universal decoder] '/home/thesacih/wealthyhack.com/wp-includes/version.php' # Script version check [OLD] [Wordpress v6.7.2 < v6.8.1] ----------- SCAN SUMMARY ----------- Scanned directories: 27525 Scanned files: 185836 Ignored items: 1034 Suspicious matches: 128 Viruses found: 5 Fingerprint matches: 32 Data scanned: 7470.76 MB Scan peak memory: 423976 kB Scan time/item: 0.072 sec Scan time: 15312.001 sec