AlkantarClanX12
Current Path : /usr/local/maldetect/ |
Current File : //usr/local/maldetect/event_log |
Feb 27 2025 03:19:16 server maldet(29494): {sigup} performing signature update check... Feb 27 2025 03:19:16 server maldet(29494): {sigup} local signature set is version 20250225482944 Feb 27 2025 03:19:16 server maldet(29494): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 27 2025 03:19:17 server maldet(29494): {sigup} latest signature set already installed Feb 27 2025 03:19:17 server maldet(28937): {update} completed update v1.6.6 1591f0 => v1.6.6 359d25, running signature updates... Feb 27 2025 03:19:17 server maldet(29636): {sigup} performing signature update check... Feb 27 2025 03:19:17 server maldet(29636): {sigup} local signature set is version 20250225482944 Feb 27 2025 03:19:17 server maldet(29636): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 27 2025 03:19:17 server maldet(29636): {sigup} latest signature set already installed Feb 27 2025 03:19:17 server maldet(28937): {update} update and config import completed Feb 27 2025 03:19:18 server maldet(29767): {sigup} performing signature update check... Feb 27 2025 03:19:18 server maldet(29767): {sigup} local signature set is version 20250225482944 Feb 27 2025 03:19:18 server maldet(29767): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 27 2025 03:19:18 server maldet(29767): {sigup} latest signature set already installed Feb 27 2025 03:19:20 server maldet(29905): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 27 2025 03:19:25 server maldet(29905): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 27 2025 03:19:25 server maldet(29905): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 27 2025 03:19:25 server maldet(29905): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 27 2025 03:19:25 server maldet(29905): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 27 2025 03:20:22 server maldet(29905): {scan} file list completed in 56s, found 562 files... Feb 27 2025 03:20:22 server maldet(29905): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 27 2025 03:20:22 server maldet(29905): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (562 files) in progress... Feb 27 2025 03:20:56 server maldet(29905): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 562, malware hits 0, cleaned hits 0, time 96s Feb 27 2025 03:20:56 server maldet(29905): {scan} scan report saved, to view run: maldet --report 250227-0319.29905 Feb 28 2025 04:22:00 server maldet(12814): {update} checking for available updates... Feb 28 2025 04:22:01 server maldet(12814): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Feb 28 2025 04:22:01 server maldet(12814): {update} hashing install files and checking against server... Feb 28 2025 04:22:01 server maldet(12814): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Feb 28 2025 04:22:01 server maldet(12814): {update} latest version already installed. Feb 28 2025 04:22:02 server maldet(12996): {sigup} performing signature update check... Feb 28 2025 04:22:02 server maldet(12996): {sigup} local signature set is version 20250225482944 Feb 28 2025 04:22:02 server maldet(12996): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Feb 28 2025 04:22:02 server maldet(12996): {sigup} new signature set 202502281171132 available Feb 28 2025 04:22:02 server maldet(12996): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 28 2025 04:22:02 server maldet(12996): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Feb 28 2025 04:22:03 server maldet(12996): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Feb 28 2025 04:22:03 server maldet(12996): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 28 2025 04:22:03 server maldet(12996): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Feb 28 2025 04:22:04 server maldet(12996): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Feb 28 2025 04:22:04 server maldet(12996): {sigup} verified md5sum of maldet-sigpack.tgz Feb 28 2025 04:22:04 server maldet(12996): {sigup} unpacked and installed maldet-sigpack.tgz Feb 28 2025 04:22:04 server maldet(12996): {sigup} verified md5sum of maldet-clean.tgz Feb 28 2025 04:22:04 server maldet(12996): {sigup} unpacked and installed maldet-clean.tgz Feb 28 2025 04:22:04 server maldet(12996): {sigup} signature set update completed Feb 28 2025 04:22:04 server maldet(12996): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 28 2025 04:22:06 server maldet(13328): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Feb 28 2025 04:22:09 server maldet(13328): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Feb 28 2025 04:22:09 server maldet(13328): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Feb 28 2025 04:22:09 server maldet(13328): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Feb 28 2025 04:22:09 server maldet(13328): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Feb 28 2025 04:22:27 server maldet(13328): {scan} file list completed in 17s, found 468 files... Feb 28 2025 04:22:27 server maldet(13328): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Feb 28 2025 04:22:27 server maldet(13328): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (468 files) in progress... Feb 28 2025 04:22:58 server maldet(13328): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 468, malware hits 0, cleaned hits 0, time 52s Feb 28 2025 04:22:58 server maldet(13328): {scan} scan report saved, to view run: maldet --report 250228-0422.13328 Mar 01 2025 03:48:08 server maldet(30079): {update} checking for available updates... Mar 01 2025 03:48:08 server maldet(30079): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 01 2025 03:48:08 server maldet(30079): {update} hashing install files and checking against server... Mar 01 2025 03:48:09 server maldet(30079): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 01 2025 03:48:09 server maldet(30079): {update} latest version already installed. Mar 01 2025 03:48:09 server maldet(30242): {sigup} performing signature update check... Mar 01 2025 03:48:09 server maldet(30242): {sigup} local signature set is version 202502281171132 Mar 01 2025 03:48:09 server maldet(30242): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 01 2025 03:48:09 server maldet(30242): {sigup} new signature set 202503011812952 available Mar 01 2025 03:48:09 server maldet(30242): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 01 2025 03:48:10 server maldet(30242): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 01 2025 03:48:10 server maldet(30242): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 01 2025 03:48:10 server maldet(30242): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 01 2025 03:48:10 server maldet(30242): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 01 2025 03:48:11 server maldet(30242): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 01 2025 03:48:11 server maldet(30242): {sigup} verified md5sum of maldet-sigpack.tgz Mar 01 2025 03:48:11 server maldet(30242): {sigup} unpacked and installed maldet-sigpack.tgz Mar 01 2025 03:48:11 server maldet(30242): {sigup} verified md5sum of maldet-clean.tgz Mar 01 2025 03:48:11 server maldet(30242): {sigup} unpacked and installed maldet-clean.tgz Mar 01 2025 03:48:11 server maldet(30242): {sigup} signature set update completed Mar 01 2025 03:48:11 server maldet(30242): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 01 2025 03:48:13 server maldet(30643): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 01 2025 03:48:14 server maldet(30643): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 01 2025 03:48:14 server maldet(30643): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 01 2025 03:48:14 server maldet(30643): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 01 2025 03:48:14 server maldet(30643): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 01 2025 03:48:26 server maldet(30643): {scan} file list completed in 11s, found 567 files... Mar 01 2025 03:48:26 server maldet(30643): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 01 2025 03:48:26 server maldet(30643): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (567 files) in progress... Mar 01 2025 03:49:01 server maldet(30643): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 567, malware hits 0, cleaned hits 0, time 48s Mar 01 2025 03:49:01 server maldet(30643): {scan} scan report saved, to view run: maldet --report 250301-0348.30643 Mar 02 2025 04:10:53 server maldet(19057): {update} checking for available updates... Mar 02 2025 04:10:53 server maldet(19057): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 02 2025 04:10:53 server maldet(19057): {update} hashing install files and checking against server... Mar 02 2025 04:10:54 server maldet(19057): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 02 2025 04:10:54 server maldet(19057): {update} latest version already installed. Mar 02 2025 04:10:54 server maldet(22132): {sigup} performing signature update check... Mar 02 2025 04:10:54 server maldet(22132): {sigup} local signature set is version 202503011812952 Mar 02 2025 04:10:55 server maldet(22132): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 02 2025 04:10:55 server maldet(22132): {sigup} latest signature set already installed Mar 02 2025 04:10:57 server maldet(25807): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 02 2025 04:10:59 server maldet(25807): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 02 2025 04:10:59 server maldet(25807): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 02 2025 04:10:59 server maldet(25807): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 02 2025 04:10:59 server maldet(25807): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 02 2025 04:11:27 server maldet(25807): {scan} file list completed in 27s, found 486 files... Mar 02 2025 04:11:27 server maldet(25807): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 02 2025 04:11:27 server maldet(25807): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (486 files) in progress... Mar 02 2025 04:12:00 server maldet(25807): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 486, malware hits 0, cleaned hits 0, time 63s Mar 02 2025 04:12:00 server maldet(25807): {scan} scan report saved, to view run: maldet --report 250302-0410.25807 Mar 03 2025 04:14:48 server maldet(3577): {update} checking for available updates... Mar 03 2025 04:14:49 server maldet(3577): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 03 2025 04:14:49 server maldet(3577): {update} hashing install files and checking against server... Mar 03 2025 04:14:51 server maldet(3577): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 03 2025 04:14:51 server maldet(3577): {update} latest version already installed. Mar 03 2025 04:14:52 server maldet(3940): {sigup} performing signature update check... Mar 03 2025 04:14:52 server maldet(3940): {sigup} local signature set is version 202503011812952 Mar 03 2025 04:14:53 server maldet(3940): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 03 2025 04:14:53 server maldet(3940): {sigup} latest signature set already installed Mar 03 2025 04:14:58 server maldet(4132): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 03 2025 04:15:06 server maldet(4132): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 03 2025 04:15:07 server maldet(4132): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 03 2025 04:15:07 server maldet(4132): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 03 2025 04:15:08 server maldet(4132): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 03 2025 04:16:03 server maldet(4132): {scan} file list completed in 55s, found 481 files... Mar 03 2025 04:16:03 server maldet(4132): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 03 2025 04:16:03 server maldet(4132): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (481 files) in progress... Mar 03 2025 04:16:55 server maldet(4132): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 481, malware hits 0, cleaned hits 0, time 116s Mar 03 2025 04:16:55 server maldet(4132): {scan} scan report saved, to view run: maldet --report 250303-0414.4132 Mar 04 2025 03:41:50 server maldet(3166): {update} checking for available updates... Mar 04 2025 03:41:50 server maldet(3166): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 04 2025 03:41:50 server maldet(3166): {update} hashing install files and checking against server... Mar 04 2025 03:41:51 server maldet(3166): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 04 2025 03:41:51 server maldet(3166): {update} latest version already installed. Mar 04 2025 03:41:51 server maldet(3354): {sigup} performing signature update check... Mar 04 2025 03:41:51 server maldet(3354): {sigup} local signature set is version 202503011812952 Mar 04 2025 03:41:51 server maldet(3354): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 04 2025 03:41:51 server maldet(3354): {sigup} latest signature set already installed Mar 04 2025 03:41:52 server maldet(3512): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 04 2025 03:41:53 server maldet(3512): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 04 2025 03:41:53 server maldet(3512): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 04 2025 03:41:53 server maldet(3512): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 04 2025 03:41:53 server maldet(3512): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 04 2025 03:42:04 server maldet(3512): {scan} file list completed in 10s, found 16582 files... Mar 04 2025 03:42:04 server maldet(3512): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 04 2025 03:42:04 server maldet(3512): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (16582 files) in progress... Mar 04 2025 03:50:08 server maldet(3512): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 16582, malware hits 0, cleaned hits 0, time 496s Mar 04 2025 03:50:08 server maldet(3512): {scan} scan report saved, to view run: maldet --report 250304-0341.3512 Mar 05 2025 04:14:03 server maldet(10123): {update} checking for available updates... Mar 05 2025 04:14:04 server maldet(10123): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 05 2025 04:14:04 server maldet(10123): {update} hashing install files and checking against server... Mar 05 2025 04:14:04 server maldet(10123): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 05 2025 04:14:04 server maldet(10123): {update} latest version already installed. Mar 05 2025 04:14:04 server maldet(10313): {sigup} performing signature update check... Mar 05 2025 04:14:04 server maldet(10313): {sigup} local signature set is version 202503011812952 Mar 05 2025 04:14:04 server maldet(10313): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 05 2025 04:14:05 server maldet(10313): {sigup} new signature set 20250304486819 available Mar 05 2025 04:14:05 server maldet(10313): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 05 2025 04:14:05 server maldet(10313): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 05 2025 04:14:05 server maldet(10313): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 05 2025 04:14:06 server maldet(10313): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 05 2025 04:14:06 server maldet(10313): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 05 2025 04:14:06 server maldet(10313): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 05 2025 04:14:06 server maldet(10313): {sigup} verified md5sum of maldet-sigpack.tgz Mar 05 2025 04:14:06 server maldet(10313): {sigup} unpacked and installed maldet-sigpack.tgz Mar 05 2025 04:14:07 server maldet(10313): {sigup} verified md5sum of maldet-clean.tgz Mar 05 2025 04:14:07 server maldet(10313): {sigup} unpacked and installed maldet-clean.tgz Mar 05 2025 04:14:07 server maldet(10313): {sigup} signature set update completed Mar 05 2025 04:14:07 server maldet(10313): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 05 2025 04:14:08 server maldet(10618): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 05 2025 04:14:09 server maldet(10618): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 05 2025 04:14:09 server maldet(10618): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 05 2025 04:14:09 server maldet(10618): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 05 2025 04:14:09 server maldet(10618): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 05 2025 04:14:20 server maldet(10618): {scan} file list completed in 10s, found 27627 files... Mar 05 2025 04:14:20 server maldet(10618): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 05 2025 04:14:20 server maldet(10618): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (27627 files) in progress... Mar 05 2025 04:23:22 server maldet(10618): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 27627, malware hits 0, cleaned hits 0, time 554s Mar 05 2025 04:23:22 server maldet(10618): {scan} scan report saved, to view run: maldet --report 250305-0414.10618 Mar 06 2025 03:27:57 server maldet(2255): {update} checking for available updates... Mar 06 2025 03:27:57 server maldet(2255): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 06 2025 03:27:57 server maldet(2255): {update} hashing install files and checking against server... Mar 06 2025 03:27:57 server maldet(2255): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 06 2025 03:27:57 server maldet(2255): {update} latest version already installed. Mar 06 2025 03:27:57 server maldet(2428): {sigup} performing signature update check... Mar 06 2025 03:27:57 server maldet(2428): {sigup} local signature set is version 20250304486819 Mar 06 2025 03:27:58 server maldet(2428): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 06 2025 03:27:58 server maldet(2428): {sigup} latest signature set already installed Mar 06 2025 03:27:59 server maldet(2563): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 06 2025 03:28:00 server maldet(2563): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 06 2025 03:28:00 server maldet(2563): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 06 2025 03:28:00 server maldet(2563): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 06 2025 03:28:00 server maldet(2563): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 06 2025 03:28:16 server maldet(2563): {scan} file list completed in 15s, found 487 files... Mar 06 2025 03:28:16 server maldet(2563): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 06 2025 03:28:16 server maldet(2563): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (487 files) in progress... Mar 06 2025 03:28:40 server maldet(2563): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 487, malware hits 0, cleaned hits 0, time 40s Mar 06 2025 03:28:40 server maldet(2563): {scan} scan report saved, to view run: maldet --report 250306-0327.2563 Mar 07 2025 03:43:43 server maldet(13487): {update} checking for available updates... Mar 07 2025 03:43:43 server maldet(13487): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 07 2025 03:43:43 server maldet(13487): {update} hashing install files and checking against server... Mar 07 2025 03:43:43 server maldet(13487): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 07 2025 03:43:43 server maldet(13487): {update} latest version already installed. Mar 07 2025 03:43:43 server maldet(13634): {sigup} performing signature update check... Mar 07 2025 03:43:43 server maldet(13634): {sigup} local signature set is version 20250304486819 Mar 07 2025 03:43:44 server maldet(13634): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 07 2025 03:43:44 server maldet(13634): {sigup} new signature set 202503071159774 available Mar 07 2025 03:43:44 server maldet(13634): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 07 2025 03:43:44 server maldet(13634): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 07 2025 03:43:44 server maldet(13634): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 07 2025 03:43:44 server maldet(13634): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 07 2025 03:43:45 server maldet(13634): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 07 2025 03:43:45 server maldet(13634): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 07 2025 03:43:45 server maldet(13634): {sigup} verified md5sum of maldet-sigpack.tgz Mar 07 2025 03:43:45 server maldet(13634): {sigup} unpacked and installed maldet-sigpack.tgz Mar 07 2025 03:43:46 server maldet(13634): {sigup} verified md5sum of maldet-clean.tgz Mar 07 2025 03:43:46 server maldet(13634): {sigup} unpacked and installed maldet-clean.tgz Mar 07 2025 03:43:46 server maldet(13634): {sigup} signature set update completed Mar 07 2025 03:43:46 server maldet(13634): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 07 2025 03:43:47 server maldet(13955): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 07 2025 03:43:48 server maldet(13955): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 07 2025 03:43:48 server maldet(13955): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 07 2025 03:43:48 server maldet(13955): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 07 2025 03:43:48 server maldet(13955): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 07 2025 03:44:01 server maldet(13955): {scan} file list completed in 12s, found 1800 files... Mar 07 2025 03:44:01 server maldet(13955): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 07 2025 03:44:01 server maldet(13955): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1800 files) in progress... Mar 07 2025 03:44:54 server maldet(13955): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1800, malware hits 0, cleaned hits 0, time 67s Mar 07 2025 03:44:54 server maldet(13955): {scan} scan report saved, to view run: maldet --report 250307-0343.13955 Mar 08 2025 03:58:41 server maldet(19837): {update} checking for available updates... Mar 08 2025 03:58:42 server maldet(19837): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 08 2025 03:58:42 server maldet(19837): {update} hashing install files and checking against server... Mar 08 2025 03:58:42 server maldet(19837): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 08 2025 03:58:42 server maldet(19837): {update} latest version already installed. Mar 08 2025 03:58:42 server maldet(20089): {sigup} performing signature update check... Mar 08 2025 03:58:42 server maldet(20089): {sigup} local signature set is version 202503071159774 Mar 08 2025 03:58:43 server maldet(20089): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 08 2025 03:58:43 server maldet(20089): {sigup} latest signature set already installed Mar 08 2025 03:58:44 server maldet(20238): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 08 2025 03:58:45 server maldet(20238): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 08 2025 03:58:45 server maldet(20238): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 08 2025 03:58:45 server maldet(20238): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 08 2025 03:58:45 server maldet(20238): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 08 2025 03:58:57 server maldet(20238): {scan} file list completed in 11s, found 1121 files... Mar 08 2025 03:58:57 server maldet(20238): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 08 2025 03:58:57 server maldet(20238): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1121 files) in progress... Mar 08 2025 03:59:42 server maldet(20238): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1121, malware hits 0, cleaned hits 0, time 58s Mar 08 2025 03:59:42 server maldet(20238): {scan} scan report saved, to view run: maldet --report 250308-0358.20238 Mar 09 2025 03:30:16 server maldet(11946): {update} checking for available updates... Mar 09 2025 03:30:17 server maldet(11946): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 09 2025 03:30:17 server maldet(11946): {update} hashing install files and checking against server... Mar 09 2025 03:30:17 server maldet(11946): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 09 2025 03:30:18 server maldet(11946): {update} latest version already installed. Mar 09 2025 03:30:18 server maldet(13755): {sigup} performing signature update check... Mar 09 2025 03:30:18 server maldet(13755): {sigup} local signature set is version 202503071159774 Mar 09 2025 03:30:18 server maldet(13755): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 09 2025 03:30:18 server maldet(13755): {sigup} latest signature set already installed Mar 09 2025 03:30:20 server maldet(17701): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 09 2025 03:30:22 server maldet(17701): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 09 2025 03:30:22 server maldet(17701): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 09 2025 03:30:22 server maldet(17701): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 09 2025 03:30:22 server maldet(17701): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 09 2025 03:30:49 server maldet(17701): {scan} file list completed in 26s, found 461 files... Mar 09 2025 03:30:49 server maldet(17701): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 09 2025 03:30:49 server maldet(17701): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (461 files) in progress... Mar 09 2025 03:31:16 server maldet(17701): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 461, malware hits 0, cleaned hits 0, time 56s Mar 09 2025 03:31:17 server maldet(17701): {scan} scan report saved, to view run: maldet --report 250309-0330.17701 Mar 10 2025 03:51:15 server maldet(32053): {update} checking for available updates... Mar 10 2025 03:51:15 server maldet(32053): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 10 2025 03:51:15 server maldet(32053): {update} hashing install files and checking against server... Mar 10 2025 03:51:16 server maldet(32053): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 10 2025 03:51:16 server maldet(32053): {update} latest version already installed. Mar 10 2025 03:51:16 server maldet(32246): {sigup} performing signature update check... Mar 10 2025 03:51:16 server maldet(32246): {sigup} local signature set is version 202503071159774 Mar 10 2025 03:51:16 server maldet(32246): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 10 2025 03:51:16 server maldet(32246): {sigup} latest signature set already installed Mar 10 2025 03:51:18 server maldet(32389): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 10 2025 03:51:19 server maldet(32389): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 10 2025 03:51:19 server maldet(32389): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 10 2025 03:51:19 server maldet(32389): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 10 2025 03:51:19 server maldet(32389): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 10 2025 03:51:36 server maldet(32389): {scan} file list completed in 16s, found 457 files... Mar 10 2025 03:51:36 server maldet(32389): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 10 2025 03:51:36 server maldet(32389): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (457 files) in progress... Mar 10 2025 03:52:01 server maldet(32389): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 457, malware hits 0, cleaned hits 0, time 43s Mar 10 2025 03:52:01 server maldet(32389): {scan} scan report saved, to view run: maldet --report 250310-0351.32389 Mar 11 2025 03:38:25 server maldet(27940): {update} checking for available updates... Mar 11 2025 03:38:26 server maldet(27940): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 11 2025 03:38:26 server maldet(27940): {update} hashing install files and checking against server... Mar 11 2025 03:38:26 server maldet(27940): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 11 2025 03:38:26 server maldet(27940): {update} latest version already installed. Mar 11 2025 03:38:26 server maldet(29079): {sigup} performing signature update check... Mar 11 2025 03:38:26 server maldet(29079): {sigup} local signature set is version 202503071159774 Mar 11 2025 03:38:27 server maldet(29079): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 11 2025 03:38:27 server maldet(29079): {sigup} latest signature set already installed Mar 11 2025 03:38:28 server maldet(30625): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 11 2025 03:38:30 server maldet(30625): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 11 2025 03:38:30 server maldet(30625): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 11 2025 03:38:30 server maldet(30625): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 11 2025 03:38:30 server maldet(30625): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 11 2025 03:38:44 server maldet(30625): {scan} file list completed in 13s, found 441 files... Mar 11 2025 03:38:44 server maldet(30625): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 11 2025 03:38:44 server maldet(30625): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (441 files) in progress... Mar 11 2025 03:39:20 server maldet(30625): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 441, malware hits 0, cleaned hits 0, time 52s Mar 11 2025 03:39:20 server maldet(30625): {scan} scan report saved, to view run: maldet --report 250311-0338.30625 Mar 12 2025 04:48:51 server maldet(596): {update} checking for available updates... Mar 12 2025 04:48:51 server maldet(596): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 12 2025 04:48:51 server maldet(596): {update} hashing install files and checking against server... Mar 12 2025 04:48:52 server maldet(596): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 12 2025 04:48:52 server maldet(596): {update} latest version already installed. Mar 12 2025 04:48:52 server maldet(769): {sigup} performing signature update check... Mar 12 2025 04:48:52 server maldet(769): {sigup} local signature set is version 202503071159774 Mar 12 2025 04:48:52 server maldet(769): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 12 2025 04:48:52 server maldet(769): {sigup} latest signature set already installed Mar 12 2025 04:48:53 server maldet(887): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 12 2025 04:48:55 server maldet(887): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 12 2025 04:48:55 server maldet(887): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 12 2025 04:48:55 server maldet(887): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 12 2025 04:48:55 server maldet(887): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 12 2025 04:49:06 server maldet(887): {scan} file list completed in 10s, found 729 files... Mar 12 2025 04:49:06 server maldet(887): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 12 2025 04:49:06 server maldet(887): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (729 files) in progress... Mar 12 2025 04:49:26 server maldet(887): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 729, malware hits 0, cleaned hits 0, time 33s Mar 12 2025 04:49:26 server maldet(887): {scan} scan report saved, to view run: maldet --report 250312-0448.887 Mar 13 2025 03:41:45 server maldet(15625): {update} checking for available updates... Mar 13 2025 03:41:46 server maldet(15625): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 13 2025 03:41:46 server maldet(15625): {update} hashing install files and checking against server... Mar 13 2025 03:41:46 server maldet(15625): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 13 2025 03:41:46 server maldet(15625): {update} latest version already installed. Mar 13 2025 03:41:46 server maldet(15772): {sigup} performing signature update check... Mar 13 2025 03:41:46 server maldet(15772): {sigup} local signature set is version 202503071159774 Mar 13 2025 03:41:47 server maldet(15772): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 13 2025 03:41:47 server maldet(15772): {sigup} new signature set 20250313525494 available Mar 13 2025 03:41:47 server maldet(15772): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 13 2025 03:41:47 server maldet(15772): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 13 2025 03:41:47 server maldet(15772): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 13 2025 03:41:48 server maldet(15772): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 13 2025 03:41:48 server maldet(15772): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 13 2025 03:41:48 server maldet(15772): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 13 2025 03:41:48 server maldet(15772): {sigup} verified md5sum of maldet-sigpack.tgz Mar 13 2025 03:41:48 server maldet(15772): {sigup} unpacked and installed maldet-sigpack.tgz Mar 13 2025 03:41:49 server maldet(15772): {sigup} verified md5sum of maldet-clean.tgz Mar 13 2025 03:41:49 server maldet(15772): {sigup} unpacked and installed maldet-clean.tgz Mar 13 2025 03:41:49 server maldet(15772): {sigup} signature set update completed Mar 13 2025 03:41:50 server maldet(15772): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 13 2025 03:41:51 server maldet(16081): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 13 2025 03:41:54 server maldet(16081): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 13 2025 03:41:54 server maldet(16081): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 13 2025 03:41:55 server maldet(16081): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 13 2025 03:41:55 server maldet(16081): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 13 2025 03:42:39 server maldet(16081): {scan} file list completed in 44s, found 816 files... Mar 13 2025 03:42:39 server maldet(16081): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 13 2025 03:42:39 server maldet(16081): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (816 files) in progress... Mar 13 2025 03:43:11 server maldet(16081): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 816, malware hits 0, cleaned hits 0, time 80s Mar 13 2025 03:43:11 server maldet(16081): {scan} scan report saved, to view run: maldet --report 250313-0341.16081 Mar 14 2025 04:39:02 server maldet(20180): {update} checking for available updates... Mar 14 2025 04:39:04 server maldet(20180): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 14 2025 04:39:04 server maldet(20180): {update} hashing install files and checking against server... Mar 14 2025 04:39:05 server maldet(20180): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 14 2025 04:39:05 server maldet(20180): {update} latest version already installed. Mar 14 2025 04:39:05 server maldet(20454): {sigup} performing signature update check... Mar 14 2025 04:39:06 server maldet(20454): {sigup} local signature set is version 20250313525494 Mar 14 2025 04:39:06 server maldet(20454): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 14 2025 04:39:06 server maldet(20454): {sigup} latest signature set already installed Mar 14 2025 04:39:09 server maldet(20749): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 14 2025 04:39:10 server maldet(20749): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 14 2025 04:39:10 server maldet(20749): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 14 2025 04:39:10 server maldet(20749): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 14 2025 04:39:10 server maldet(20749): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 14 2025 04:39:26 server maldet(20749): {scan} file list completed in 16s, found 3392 files... Mar 14 2025 04:39:26 server maldet(20749): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 14 2025 04:39:26 server maldet(20749): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3392 files) in progress... Mar 14 2025 04:40:36 server maldet(20749): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3392, malware hits 0, cleaned hits 0, time 87s Mar 14 2025 04:40:36 server maldet(20749): {scan} scan report saved, to view run: maldet --report 250314-0439.20749 Mar 15 2025 04:00:33 server maldet(806): {update} checking for available updates... Mar 15 2025 04:00:34 server maldet(806): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 15 2025 04:00:34 server maldet(806): {update} hashing install files and checking against server... Mar 15 2025 04:00:34 server maldet(806): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 15 2025 04:00:34 server maldet(806): {update} latest version already installed. Mar 15 2025 04:00:34 server maldet(931): {sigup} performing signature update check... Mar 15 2025 04:00:34 server maldet(931): {sigup} local signature set is version 20250313525494 Mar 15 2025 04:00:35 server maldet(931): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 15 2025 04:00:35 server maldet(931): {sigup} latest signature set already installed Mar 15 2025 04:00:36 server maldet(1042): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 15 2025 04:00:37 server maldet(1042): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 15 2025 04:00:37 server maldet(1042): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 15 2025 04:00:37 server maldet(1042): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 15 2025 04:00:37 server maldet(1042): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 15 2025 04:01:01 server maldet(1042): {scan} file list completed in 23s, found 701 files... Mar 15 2025 04:01:01 server maldet(1042): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 15 2025 04:01:01 server maldet(1042): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (701 files) in progress... Mar 15 2025 04:01:44 server maldet(1042): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 701, malware hits 0, cleaned hits 0, time 68s Mar 15 2025 04:01:44 server maldet(1042): {scan} scan report saved, to view run: maldet --report 250315-0400.1042 Mar 16 2025 04:16:23 server maldet(921): {update} checking for available updates... Mar 16 2025 04:16:23 server maldet(921): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 16 2025 04:16:23 server maldet(921): {update} hashing install files and checking against server... Mar 16 2025 04:16:24 server maldet(921): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 16 2025 04:16:24 server maldet(921): {update} latest version already installed. Mar 16 2025 04:16:24 server maldet(1053): {sigup} performing signature update check... Mar 16 2025 04:16:24 server maldet(1053): {sigup} local signature set is version 20250313525494 Mar 16 2025 04:16:24 server maldet(1053): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 16 2025 04:16:24 server maldet(1053): {sigup} new signature set 20250316483998 available Mar 16 2025 04:16:24 server maldet(1053): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 16 2025 04:16:25 server maldet(1053): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 16 2025 04:16:25 server maldet(1053): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 16 2025 04:16:25 server maldet(1053): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 16 2025 04:16:25 server maldet(1053): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 16 2025 04:16:26 server maldet(1053): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 16 2025 04:16:26 server maldet(1053): {sigup} verified md5sum of maldet-sigpack.tgz Mar 16 2025 04:16:26 server maldet(1053): {sigup} unpacked and installed maldet-sigpack.tgz Mar 16 2025 04:16:26 server maldet(1053): {sigup} verified md5sum of maldet-clean.tgz Mar 16 2025 04:16:26 server maldet(1053): {sigup} unpacked and installed maldet-clean.tgz Mar 16 2025 04:16:26 server maldet(1053): {sigup} signature set update completed Mar 16 2025 04:16:26 server maldet(1053): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 16 2025 04:16:27 server maldet(1316): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 16 2025 04:16:28 server maldet(1316): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 16 2025 04:16:28 server maldet(1316): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 16 2025 04:16:28 server maldet(1316): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 16 2025 04:16:28 server maldet(1316): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 16 2025 04:16:41 server maldet(1316): {scan} file list completed in 12s, found 409 files... Mar 16 2025 04:16:41 server maldet(1316): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 16 2025 04:16:41 server maldet(1316): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (409 files) in progress... Mar 16 2025 04:17:13 server maldet(1316): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 409, malware hits 0, cleaned hits 0, time 46s Mar 16 2025 04:17:13 server maldet(1316): {scan} scan report saved, to view run: maldet --report 250316-0416.1316 Mar 17 2025 04:44:09 server maldet(23073): {update} checking for available updates... Mar 17 2025 04:44:10 server maldet(23073): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 17 2025 04:44:10 server maldet(23073): {update} hashing install files and checking against server... Mar 17 2025 04:44:10 server maldet(23073): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 17 2025 04:44:10 server maldet(23073): {update} latest version already installed. Mar 17 2025 04:44:10 server maldet(24046): {sigup} performing signature update check... Mar 17 2025 04:44:10 server maldet(24046): {sigup} local signature set is version 20250316483998 Mar 17 2025 04:44:11 server maldet(24046): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 17 2025 04:44:11 server maldet(24046): {sigup} latest signature set already installed Mar 17 2025 04:44:11 server maldet(25071): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 17 2025 04:44:12 server maldet(25071): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 17 2025 04:44:12 server maldet(25071): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 17 2025 04:44:12 server maldet(25071): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 17 2025 04:44:12 server maldet(25071): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 17 2025 04:44:37 server maldet(25071): {scan} file list completed in 24s, found 425 files... Mar 17 2025 04:44:37 server maldet(25071): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 17 2025 04:44:37 server maldet(25071): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (425 files) in progress... Mar 17 2025 04:45:08 server maldet(25071): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 425, malware hits 0, cleaned hits 0, time 57s Mar 17 2025 04:45:08 server maldet(25071): {scan} scan report saved, to view run: maldet --report 250317-0444.25071 Mar 18 2025 03:44:20 server maldet(20342): {update} checking for available updates... Mar 18 2025 03:44:21 server maldet(20342): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 18 2025 03:44:21 server maldet(20342): {update} hashing install files and checking against server... Mar 18 2025 03:44:22 server maldet(20342): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 18 2025 03:44:22 server maldet(20342): {update} latest version already installed. Mar 18 2025 03:44:22 server maldet(21252): {sigup} performing signature update check... Mar 18 2025 03:44:22 server maldet(21252): {sigup} local signature set is version 20250316483998 Mar 18 2025 03:44:22 server maldet(21252): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 18 2025 03:44:22 server maldet(21252): {sigup} latest signature set already installed Mar 18 2025 03:44:23 server maldet(22134): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 18 2025 03:44:25 server maldet(22134): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 18 2025 03:44:25 server maldet(22134): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 18 2025 03:44:25 server maldet(22134): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 18 2025 03:44:25 server maldet(22134): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 18 2025 03:44:50 server maldet(22134): {scan} file list completed in 24s, found 4012 files... Mar 18 2025 03:44:50 server maldet(22134): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 18 2025 03:44:50 server maldet(22134): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4012 files) in progress... Mar 18 2025 03:46:35 server maldet(22134): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4012, malware hits 0, cleaned hits 0, time 132s Mar 18 2025 03:46:35 server maldet(22134): {scan} scan report saved, to view run: maldet --report 250318-0344.22134 Mar 19 2025 03:16:11 server maldet(13692): {update} checking for available updates... Mar 19 2025 03:16:11 server maldet(13692): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 19 2025 03:16:11 server maldet(13692): {update} hashing install files and checking against server... Mar 19 2025 03:16:12 server maldet(13692): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 19 2025 03:16:12 server maldet(13692): {update} latest version already installed. Mar 19 2025 03:16:12 server maldet(14266): {sigup} performing signature update check... Mar 19 2025 03:16:12 server maldet(14266): {sigup} local signature set is version 20250316483998 Mar 19 2025 03:16:12 server maldet(14266): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 19 2025 03:16:12 server maldet(14266): {sigup} new signature set 20250319514026 available Mar 19 2025 03:16:12 server maldet(14266): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 19 2025 03:16:13 server maldet(14266): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 19 2025 03:16:13 server maldet(14266): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 19 2025 03:16:13 server maldet(14266): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 19 2025 03:16:14 server maldet(14266): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 19 2025 03:16:14 server maldet(14266): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 19 2025 03:16:14 server maldet(14266): {sigup} verified md5sum of maldet-sigpack.tgz Mar 19 2025 03:16:15 server maldet(14266): {sigup} unpacked and installed maldet-sigpack.tgz Mar 19 2025 03:16:15 server maldet(14266): {sigup} verified md5sum of maldet-clean.tgz Mar 19 2025 03:16:15 server maldet(14266): {sigup} unpacked and installed maldet-clean.tgz Mar 19 2025 03:16:15 server maldet(14266): {sigup} signature set update completed Mar 19 2025 03:16:16 server maldet(14266): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 19 2025 03:16:17 server maldet(15807): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 19 2025 03:16:19 server maldet(15807): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 19 2025 03:16:19 server maldet(15807): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 19 2025 03:16:19 server maldet(15807): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 19 2025 03:16:19 server maldet(15807): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 19 2025 03:16:47 server maldet(15807): {scan} file list completed in 27s, found 15542 files... Mar 19 2025 03:16:47 server maldet(15807): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 19 2025 03:16:47 server maldet(15807): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (15542 files) in progress... Mar 19 2025 03:26:04 server maldet(15807): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 15542, malware hits 0, cleaned hits 0, time 587s Mar 19 2025 03:26:04 server maldet(15807): {scan} scan report saved, to view run: maldet --report 250319-0316.15807 Mar 20 2025 03:40:48 server maldet(26053): {update} checking for available updates... Mar 20 2025 03:40:49 server maldet(26053): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 20 2025 03:40:49 server maldet(26053): {update} hashing install files and checking against server... Mar 20 2025 03:40:49 server maldet(26053): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 20 2025 03:40:49 server maldet(26053): {update} latest version already installed. Mar 20 2025 03:40:49 server maldet(26204): {sigup} performing signature update check... Mar 20 2025 03:40:49 server maldet(26204): {sigup} local signature set is version 20250319514026 Mar 20 2025 03:40:50 server maldet(26204): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 20 2025 03:40:50 server maldet(26204): {sigup} latest signature set already installed Mar 20 2025 03:40:51 server maldet(26314): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 20 2025 03:40:52 server maldet(26314): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 20 2025 03:40:52 server maldet(26314): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 20 2025 03:40:52 server maldet(26314): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 20 2025 03:40:52 server maldet(26314): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 20 2025 03:41:05 server maldet(26314): {scan} file list completed in 12s, found 448 files... Mar 20 2025 03:41:05 server maldet(26314): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 20 2025 03:41:05 server maldet(26314): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (448 files) in progress... Mar 20 2025 03:41:36 server maldet(26314): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 448, malware hits 0, cleaned hits 0, time 44s Mar 20 2025 03:41:36 server maldet(26314): {scan} scan report saved, to view run: maldet --report 250320-0340.26314 Mar 21 2025 03:45:25 server maldet(24686): {update} checking for available updates... Mar 21 2025 03:45:25 server maldet(24686): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 21 2025 03:45:25 server maldet(24686): {update} hashing install files and checking against server... Mar 21 2025 03:45:26 server maldet(24686): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 21 2025 03:45:26 server maldet(24686): {update} latest version already installed. Mar 21 2025 03:45:26 server maldet(24839): {sigup} performing signature update check... Mar 21 2025 03:45:26 server maldet(24839): {sigup} local signature set is version 20250319514026 Mar 21 2025 03:45:26 server maldet(24839): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 21 2025 03:45:26 server maldet(24839): {sigup} latest signature set already installed Mar 21 2025 03:45:27 server maldet(24945): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 21 2025 03:45:28 server maldet(24945): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 21 2025 03:45:28 server maldet(24945): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 21 2025 03:45:28 server maldet(24945): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 21 2025 03:45:28 server maldet(24945): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 21 2025 03:45:41 server maldet(24945): {scan} file list completed in 12s, found 1160 files... Mar 21 2025 03:45:41 server maldet(24945): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 21 2025 03:45:41 server maldet(24945): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1160 files) in progress... Mar 21 2025 03:46:08 server maldet(24945): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1160, malware hits 0, cleaned hits 0, time 41s Mar 21 2025 03:46:08 server maldet(24945): {scan} scan report saved, to view run: maldet --report 250321-0345.24945 Mar 22 2025 04:18:01 server maldet(12023): {update} checking for available updates... Mar 22 2025 04:18:01 server maldet(12023): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 22 2025 04:18:01 server maldet(12023): {update} hashing install files and checking against server... Mar 22 2025 04:18:02 server maldet(12023): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 22 2025 04:18:02 server maldet(12023): {update} latest version already installed. Mar 22 2025 04:18:02 server maldet(12212): {sigup} performing signature update check... Mar 22 2025 04:18:02 server maldet(12212): {sigup} local signature set is version 20250319514026 Mar 22 2025 04:18:02 server maldet(12212): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 22 2025 04:18:02 server maldet(12212): {sigup} new signature set 202503221188379 available Mar 22 2025 04:18:02 server maldet(12212): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 22 2025 04:18:03 server maldet(12212): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 22 2025 04:18:03 server maldet(12212): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 22 2025 04:18:03 server maldet(12212): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 22 2025 04:18:04 server maldet(12212): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 22 2025 04:18:04 server maldet(12212): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 22 2025 04:18:04 server maldet(12212): {sigup} verified md5sum of maldet-sigpack.tgz Mar 22 2025 04:18:04 server maldet(12212): {sigup} unpacked and installed maldet-sigpack.tgz Mar 22 2025 04:18:04 server maldet(12212): {sigup} verified md5sum of maldet-clean.tgz Mar 22 2025 04:18:04 server maldet(12212): {sigup} unpacked and installed maldet-clean.tgz Mar 22 2025 04:18:04 server maldet(12212): {sigup} signature set update completed Mar 22 2025 04:18:04 server maldet(12212): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 22 2025 04:18:06 server maldet(12494): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 22 2025 04:18:07 server maldet(12494): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 22 2025 04:18:07 server maldet(12494): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 22 2025 04:18:07 server maldet(12494): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 22 2025 04:18:07 server maldet(12494): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 22 2025 04:18:45 server maldet(12494): {scan} file list completed in 38s, found 535 files... Mar 22 2025 04:18:45 server maldet(12494): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 22 2025 04:18:45 server maldet(12494): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (535 files) in progress... Mar 22 2025 04:19:16 server maldet(12494): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 535, malware hits 0, cleaned hits 0, time 70s Mar 22 2025 04:19:16 server maldet(12494): {scan} scan report saved, to view run: maldet --report 250322-0418.12494 Mar 23 2025 03:39:52 server maldet(9342): {update} checking for available updates... Mar 23 2025 03:39:52 server maldet(9342): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 23 2025 03:39:52 server maldet(9342): {update} hashing install files and checking against server... Mar 23 2025 03:39:53 server maldet(9342): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 23 2025 03:39:53 server maldet(9342): {update} latest version already installed. Mar 23 2025 03:39:53 server maldet(9493): {sigup} performing signature update check... Mar 23 2025 03:39:53 server maldet(9493): {sigup} local signature set is version 202503221188379 Mar 23 2025 03:39:53 server maldet(9493): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 23 2025 03:39:54 server maldet(9493): {sigup} latest signature set already installed Mar 23 2025 03:39:55 server maldet(9599): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 23 2025 03:39:57 server maldet(9599): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 23 2025 03:39:57 server maldet(9599): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 23 2025 03:39:57 server maldet(9599): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 23 2025 03:39:57 server maldet(9599): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 23 2025 03:40:18 server maldet(9599): {scan} file list completed in 20s, found 351 files... Mar 23 2025 03:40:18 server maldet(9599): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 23 2025 03:40:18 server maldet(9599): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (351 files) in progress... Mar 23 2025 03:40:39 server maldet(9599): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 351, malware hits 0, cleaned hits 0, time 44s Mar 23 2025 03:40:39 server maldet(9599): {scan} scan report saved, to view run: maldet --report 250323-0339.9599 Mar 24 2025 03:32:48 server maldet(20324): {update} checking for available updates... Mar 24 2025 03:32:48 server maldet(20324): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 24 2025 03:32:48 server maldet(20324): {update} hashing install files and checking against server... Mar 24 2025 03:32:49 server maldet(20324): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 24 2025 03:32:49 server maldet(20324): {update} latest version already installed. Mar 24 2025 03:32:49 server maldet(20448): {sigup} performing signature update check... Mar 24 2025 03:32:49 server maldet(20448): {sigup} local signature set is version 202503221188379 Mar 24 2025 03:32:49 server maldet(20448): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 24 2025 03:32:49 server maldet(20448): {sigup} latest signature set already installed Mar 24 2025 03:32:50 server maldet(20565): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 24 2025 03:32:51 server maldet(20565): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 24 2025 03:32:51 server maldet(20565): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 24 2025 03:32:51 server maldet(20565): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 24 2025 03:32:51 server maldet(20565): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 24 2025 03:33:10 server maldet(20565): {scan} file list completed in 19s, found 3888 files... Mar 24 2025 03:33:10 server maldet(20565): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 24 2025 03:33:10 server maldet(20565): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3888 files) in progress... Mar 24 2025 03:34:27 server maldet(20565): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3888, malware hits 0, cleaned hits 0, time 97s Mar 24 2025 03:34:27 server maldet(20565): {scan} scan report saved, to view run: maldet --report 250324-0332.20565 Mar 25 2025 04:15:23 server maldet(11070): {update} checking for available updates... Mar 25 2025 04:15:23 server maldet(11070): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 25 2025 04:15:23 server maldet(11070): {update} hashing install files and checking against server... Mar 25 2025 04:15:24 server maldet(11070): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 25 2025 04:15:24 server maldet(11070): {update} latest version already installed. Mar 25 2025 04:15:24 server maldet(11225): {sigup} performing signature update check... Mar 25 2025 04:15:24 server maldet(11225): {sigup} local signature set is version 202503221188379 Mar 25 2025 04:15:24 server maldet(11225): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 25 2025 04:15:24 server maldet(11225): {sigup} new signature set 202503251862979 available Mar 25 2025 04:15:24 server maldet(11225): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 25 2025 04:15:25 server maldet(11225): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 25 2025 04:15:25 server maldet(11225): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 25 2025 04:15:25 server maldet(11225): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 25 2025 04:15:26 server maldet(11225): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 25 2025 04:15:26 server maldet(11225): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 25 2025 04:15:26 server maldet(11225): {sigup} verified md5sum of maldet-sigpack.tgz Mar 25 2025 04:15:26 server maldet(11225): {sigup} unpacked and installed maldet-sigpack.tgz Mar 25 2025 04:15:26 server maldet(11225): {sigup} verified md5sum of maldet-clean.tgz Mar 25 2025 04:15:27 server maldet(11225): {sigup} unpacked and installed maldet-clean.tgz Mar 25 2025 04:15:27 server maldet(11225): {sigup} signature set update completed Mar 25 2025 04:15:27 server maldet(11225): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 25 2025 04:15:27 server maldet(11500): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 25 2025 04:15:29 server maldet(11500): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 25 2025 04:15:29 server maldet(11500): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 25 2025 04:15:29 server maldet(11500): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 25 2025 04:15:29 server maldet(11500): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 25 2025 04:15:47 server maldet(11500): {scan} file list completed in 17s, found 433 files... Mar 25 2025 04:15:47 server maldet(11500): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 25 2025 04:15:47 server maldet(11500): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (433 files) in progress... Mar 25 2025 04:16:19 server maldet(11500): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 433, malware hits 0, cleaned hits 0, time 51s Mar 25 2025 04:16:19 server maldet(11500): {scan} scan report saved, to view run: maldet --report 250325-0415.11500 Mar 26 2025 04:02:50 server maldet(6593): {update} checking for available updates... Mar 26 2025 04:02:51 server maldet(6593): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 26 2025 04:02:51 server maldet(6593): {update} hashing install files and checking against server... Mar 26 2025 04:02:51 server maldet(6593): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 26 2025 04:02:51 server maldet(6593): {update} latest version already installed. Mar 26 2025 04:02:51 server maldet(6843): {sigup} performing signature update check... Mar 26 2025 04:02:51 server maldet(6843): {sigup} local signature set is version 202503251862979 Mar 26 2025 04:02:52 server maldet(6843): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 26 2025 04:02:52 server maldet(6843): {sigup} latest signature set already installed Mar 26 2025 04:02:53 server maldet(6957): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 26 2025 04:02:54 server maldet(6957): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 26 2025 04:02:54 server maldet(6957): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 26 2025 04:02:54 server maldet(6957): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 26 2025 04:02:54 server maldet(6957): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 26 2025 04:03:06 server maldet(6957): {scan} file list completed in 11s, found 368 files... Mar 26 2025 04:03:06 server maldet(6957): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 26 2025 04:03:06 server maldet(6957): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (368 files) in progress... Mar 26 2025 04:03:27 server maldet(6957): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 368, malware hits 0, cleaned hits 0, time 34s Mar 26 2025 04:03:27 server maldet(6957): {scan} scan report saved, to view run: maldet --report 250326-0402.6957 Mar 27 2025 04:34:58 server maldet(9157): {update} checking for available updates... Mar 27 2025 04:34:59 server maldet(9157): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 27 2025 04:34:59 server maldet(9157): {update} hashing install files and checking against server... Mar 27 2025 04:34:59 server maldet(9157): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 27 2025 04:34:59 server maldet(9157): {update} latest version already installed. Mar 27 2025 04:35:00 server maldet(9310): {sigup} performing signature update check... Mar 27 2025 04:35:00 server maldet(9310): {sigup} local signature set is version 202503251862979 Mar 27 2025 04:35:00 server maldet(9310): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 27 2025 04:35:00 server maldet(9310): {sigup} latest signature set already installed Mar 27 2025 04:35:02 server maldet(9448): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 27 2025 04:35:08 server maldet(9448): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 27 2025 04:35:09 server maldet(9448): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 27 2025 04:35:09 server maldet(9448): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 27 2025 04:35:09 server maldet(9448): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 27 2025 04:35:25 server maldet(9448): {scan} file list completed in 16s, found 602 files... Mar 27 2025 04:35:25 server maldet(9448): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 27 2025 04:35:25 server maldet(9448): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (602 files) in progress... Mar 27 2025 04:36:10 server maldet(9448): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 602, malware hits 0, cleaned hits 0, time 66s Mar 27 2025 04:36:10 server maldet(9448): {scan} scan report saved, to view run: maldet --report 250327-0435.9448 Mar 28 2025 04:32:11 server maldet(25305): {update} checking for available updates... Mar 28 2025 04:32:13 server maldet(25305): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 28 2025 04:32:13 server maldet(25305): {update} hashing install files and checking against server... Mar 28 2025 04:32:13 server maldet(25305): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 28 2025 04:32:13 server maldet(25305): {update} latest version already installed. Mar 28 2025 04:32:14 server maldet(25501): {sigup} performing signature update check... Mar 28 2025 04:32:14 server maldet(25501): {sigup} local signature set is version 202503251862979 Mar 28 2025 04:32:14 server maldet(25501): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 28 2025 04:32:14 server maldet(25501): {sigup} new signature set 202503282537907 available Mar 28 2025 04:32:14 server maldet(25501): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 28 2025 04:32:15 server maldet(25501): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 28 2025 04:32:15 server maldet(25501): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 28 2025 04:32:15 server maldet(25501): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 28 2025 04:32:16 server maldet(25501): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 28 2025 04:32:16 server maldet(25501): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 28 2025 04:32:16 server maldet(25501): {sigup} verified md5sum of maldet-sigpack.tgz Mar 28 2025 04:32:16 server maldet(25501): {sigup} unpacked and installed maldet-sigpack.tgz Mar 28 2025 04:32:17 server maldet(25501): {sigup} verified md5sum of maldet-clean.tgz Mar 28 2025 04:32:17 server maldet(25501): {sigup} unpacked and installed maldet-clean.tgz Mar 28 2025 04:32:17 server maldet(25501): {sigup} signature set update completed Mar 28 2025 04:32:17 server maldet(25501): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 28 2025 04:32:18 server maldet(25792): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 28 2025 04:32:20 server maldet(25792): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 28 2025 04:32:20 server maldet(25792): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 28 2025 04:32:20 server maldet(25792): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 28 2025 04:32:20 server maldet(25792): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 28 2025 04:33:17 server maldet(25792): {scan} file list completed in 56s, found 1220 files... Mar 28 2025 04:33:17 server maldet(25792): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 28 2025 04:33:18 server maldet(25792): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1220 files) in progress... Mar 28 2025 04:33:55 server maldet(25792): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1220, malware hits 0, cleaned hits 0, time 97s Mar 28 2025 04:33:55 server maldet(25792): {scan} scan report saved, to view run: maldet --report 250328-0432.25792 Mar 29 2025 04:01:24 server maldet(2000): {update} checking for available updates... Mar 29 2025 04:01:24 server maldet(2000): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 29 2025 04:01:24 server maldet(2000): {update} hashing install files and checking against server... Mar 29 2025 04:01:25 server maldet(2000): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 29 2025 04:01:25 server maldet(2000): {update} latest version already installed. Mar 29 2025 04:01:25 server maldet(2161): {sigup} performing signature update check... Mar 29 2025 04:01:25 server maldet(2161): {sigup} local signature set is version 202503282537907 Mar 29 2025 04:01:25 server maldet(2161): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 29 2025 04:01:25 server maldet(2161): {sigup} latest signature set already installed Mar 29 2025 04:01:26 server maldet(2276): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 29 2025 04:01:27 server maldet(2276): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 29 2025 04:01:28 server maldet(2276): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 29 2025 04:01:28 server maldet(2276): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 29 2025 04:01:28 server maldet(2276): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 29 2025 04:01:46 server maldet(2276): {scan} file list completed in 18s, found 560 files... Mar 29 2025 04:01:46 server maldet(2276): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 29 2025 04:01:46 server maldet(2276): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (560 files) in progress... Mar 29 2025 04:02:16 server maldet(2276): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 560, malware hits 0, cleaned hits 0, time 50s Mar 29 2025 04:02:16 server maldet(2276): {scan} scan report saved, to view run: maldet --report 250329-0401.2276 Mar 30 2025 04:38:54 server maldet(13873): {update} checking for available updates... Mar 30 2025 04:38:55 server maldet(13873): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 30 2025 04:38:55 server maldet(13873): {update} hashing install files and checking against server... Mar 30 2025 04:38:55 server maldet(13873): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 30 2025 04:38:55 server maldet(13873): {update} latest version already installed. Mar 30 2025 04:38:55 server maldet(14050): {sigup} performing signature update check... Mar 30 2025 04:38:55 server maldet(14050): {sigup} local signature set is version 202503282537907 Mar 30 2025 04:38:56 server maldet(14050): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 30 2025 04:38:56 server maldet(14050): {sigup} latest signature set already installed Mar 30 2025 04:38:57 server maldet(14181): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 30 2025 04:38:58 server maldet(14181): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 30 2025 04:38:58 server maldet(14181): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 30 2025 04:38:58 server maldet(14181): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 30 2025 04:38:58 server maldet(14181): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 30 2025 04:39:20 server maldet(14181): {scan} file list completed in 22s, found 92 files... Mar 30 2025 04:39:20 server maldet(14181): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 30 2025 04:39:20 server maldet(14181): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (92 files) in progress... Mar 30 2025 04:39:27 server maldet(14181): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 92, malware hits 0, cleaned hits 0, time 30s Mar 30 2025 04:39:27 server maldet(14181): {scan} scan report saved, to view run: maldet --report 250330-0438.14181 Mar 31 2025 04:45:40 server maldet(19999): {update} checking for available updates... Mar 31 2025 04:45:40 server maldet(19999): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Mar 31 2025 04:45:40 server maldet(19999): {update} hashing install files and checking against server... Mar 31 2025 04:45:41 server maldet(19999): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Mar 31 2025 04:45:41 server maldet(19999): {update} latest version already installed. Mar 31 2025 04:45:41 server maldet(20135): {sigup} performing signature update check... Mar 31 2025 04:45:41 server maldet(20135): {sigup} local signature set is version 202503282537907 Mar 31 2025 04:45:41 server maldet(20135): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Mar 31 2025 04:45:41 server maldet(20135): {sigup} new signature set 202503313275323 available Mar 31 2025 04:45:41 server maldet(20135): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 31 2025 04:45:42 server maldet(20135): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Mar 31 2025 04:45:42 server maldet(20135): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Mar 31 2025 04:45:42 server maldet(20135): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 31 2025 04:45:42 server maldet(20135): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Mar 31 2025 04:45:43 server maldet(20135): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Mar 31 2025 04:45:43 server maldet(20135): {sigup} verified md5sum of maldet-sigpack.tgz Mar 31 2025 04:45:43 server maldet(20135): {sigup} unpacked and installed maldet-sigpack.tgz Mar 31 2025 04:45:43 server maldet(20135): {sigup} verified md5sum of maldet-clean.tgz Mar 31 2025 04:45:43 server maldet(20135): {sigup} unpacked and installed maldet-clean.tgz Mar 31 2025 04:45:43 server maldet(20135): {sigup} signature set update completed Mar 31 2025 04:45:43 server maldet(20135): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 31 2025 04:45:44 server maldet(20379): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Mar 31 2025 04:45:45 server maldet(20379): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Mar 31 2025 04:45:45 server maldet(20379): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Mar 31 2025 04:45:45 server maldet(20379): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Mar 31 2025 04:45:45 server maldet(20379): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Mar 31 2025 04:45:56 server maldet(20379): {scan} file list completed in 10s, found 3921 files... Mar 31 2025 04:45:56 server maldet(20379): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Mar 31 2025 04:45:56 server maldet(20379): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3921 files) in progress... Mar 31 2025 04:47:28 server maldet(20379): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3921, malware hits 0, cleaned hits 0, time 104s Mar 31 2025 04:47:28 server maldet(20379): {scan} scan report saved, to view run: maldet --report 250331-0445.20379 Apr 01 2025 03:51:26 server maldet(10501): {update} checking for available updates... Apr 01 2025 03:51:27 server maldet(10501): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 01 2025 03:51:27 server maldet(10501): {update} hashing install files and checking against server... Apr 01 2025 03:51:27 server maldet(10501): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 01 2025 03:51:27 server maldet(10501): {update} latest version already installed. Apr 01 2025 03:51:27 server maldet(10639): {sigup} performing signature update check... Apr 01 2025 03:51:27 server maldet(10639): {sigup} local signature set is version 202503313275323 Apr 01 2025 03:51:27 server maldet(10639): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 01 2025 03:51:28 server maldet(10639): {sigup} new signature set 202504013916532 available Apr 01 2025 03:51:28 server maldet(10639): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 01 2025 03:51:28 server maldet(10639): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 01 2025 03:51:28 server maldet(10639): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 01 2025 03:51:28 server maldet(10639): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 01 2025 03:51:29 server maldet(10639): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 01 2025 03:51:29 server maldet(10639): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 01 2025 03:51:29 server maldet(10639): {sigup} verified md5sum of maldet-sigpack.tgz Apr 01 2025 03:51:29 server maldet(10639): {sigup} unpacked and installed maldet-sigpack.tgz Apr 01 2025 03:51:29 server maldet(10639): {sigup} verified md5sum of maldet-clean.tgz Apr 01 2025 03:51:29 server maldet(10639): {sigup} unpacked and installed maldet-clean.tgz Apr 01 2025 03:51:29 server maldet(10639): {sigup} signature set update completed Apr 01 2025 03:51:29 server maldet(10639): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 01 2025 03:51:31 server maldet(10913): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 01 2025 03:51:33 server maldet(10913): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 01 2025 03:51:33 server maldet(10913): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 01 2025 03:51:33 server maldet(10913): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 01 2025 03:51:33 server maldet(10913): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 01 2025 03:51:51 server maldet(10913): {scan} file list completed in 17s, found 1421 files... Apr 01 2025 03:51:51 server maldet(10913): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 01 2025 03:51:51 server maldet(10913): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1421 files) in progress... Apr 01 2025 03:53:29 server maldet(10913): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1421, malware hits 0, cleaned hits 0, time 118s Apr 01 2025 03:53:29 server maldet(10913): {scan} scan report saved, to view run: maldet --report 250401-0351.10913 Apr 02 2025 03:55:07 server maldet(3689): {update} checking for available updates... Apr 02 2025 03:55:07 server maldet(3689): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 02 2025 03:55:07 server maldet(3689): {update} hashing install files and checking against server... Apr 02 2025 03:55:08 server maldet(3689): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 02 2025 03:55:08 server maldet(3689): {update} latest version already installed. Apr 02 2025 03:55:08 server maldet(3840): {sigup} performing signature update check... Apr 02 2025 03:55:08 server maldet(3840): {sigup} local signature set is version 202504013916532 Apr 02 2025 03:55:09 server maldet(3840): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 02 2025 03:55:09 server maldet(3840): {sigup} latest signature set already installed Apr 02 2025 03:55:10 server maldet(4006): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 02 2025 03:55:11 server maldet(4006): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 02 2025 03:55:11 server maldet(4006): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 02 2025 03:55:11 server maldet(4006): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 02 2025 03:55:11 server maldet(4006): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 02 2025 03:55:27 server maldet(4006): {scan} file list completed in 16s, found 5325 files... Apr 02 2025 03:55:27 server maldet(4006): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 02 2025 03:55:27 server maldet(4006): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (5325 files) in progress... Apr 02 2025 03:57:36 server maldet(4006): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 5325, malware hits 0, cleaned hits 0, time 146s Apr 02 2025 03:57:37 server maldet(4006): {scan} scan report saved, to view run: maldet --report 250402-0355.4006 Apr 03 2025 03:35:48 server maldet(4856): {update} checking for available updates... Apr 03 2025 03:35:49 server maldet(4856): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 03 2025 03:35:49 server maldet(4856): {update} hashing install files and checking against server... Apr 03 2025 03:35:50 server maldet(4856): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 03 2025 03:35:50 server maldet(4856): {update} latest version already installed. Apr 03 2025 03:35:50 server maldet(5007): {sigup} performing signature update check... Apr 03 2025 03:35:50 server maldet(5007): {sigup} local signature set is version 202504013916532 Apr 03 2025 03:35:50 server maldet(5007): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 03 2025 03:35:50 server maldet(5007): {sigup} latest signature set already installed Apr 03 2025 03:35:51 server maldet(5148): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 03 2025 03:35:53 server maldet(5148): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 03 2025 03:35:53 server maldet(5148): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 03 2025 03:35:53 server maldet(5148): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 03 2025 03:35:53 server maldet(5148): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 03 2025 03:36:14 server maldet(5148): {scan} file list completed in 20s, found 2259 files... Apr 03 2025 03:36:14 server maldet(5148): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 03 2025 03:36:14 server maldet(5148): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2259 files) in progress... Apr 03 2025 03:37:22 server maldet(5148): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2259, malware hits 0, cleaned hits 0, time 91s Apr 03 2025 03:37:22 server maldet(5148): {scan} scan report saved, to view run: maldet --report 250403-0335.5148 Apr 04 2025 04:18:35 server maldet(5180): {update} checking for available updates... Apr 04 2025 04:18:36 server maldet(5180): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 04 2025 04:18:36 server maldet(5180): {update} hashing install files and checking against server... Apr 04 2025 04:18:36 server maldet(5180): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 04 2025 04:18:36 server maldet(5180): {update} latest version already installed. Apr 04 2025 04:18:37 server maldet(5331): {sigup} performing signature update check... Apr 04 2025 04:18:37 server maldet(5331): {sigup} local signature set is version 202504013916532 Apr 04 2025 04:18:37 server maldet(5331): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 04 2025 04:18:37 server maldet(5331): {sigup} new signature set 20250404517655 available Apr 04 2025 04:18:37 server maldet(5331): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 04 2025 04:18:38 server maldet(5331): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 04 2025 04:18:38 server maldet(5331): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 04 2025 04:18:38 server maldet(5331): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 04 2025 04:18:38 server maldet(5331): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 04 2025 04:18:39 server maldet(5331): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 04 2025 04:18:39 server maldet(5331): {sigup} verified md5sum of maldet-sigpack.tgz Apr 04 2025 04:18:39 server maldet(5331): {sigup} unpacked and installed maldet-sigpack.tgz Apr 04 2025 04:18:39 server maldet(5331): {sigup} verified md5sum of maldet-clean.tgz Apr 04 2025 04:18:40 server maldet(5331): {sigup} unpacked and installed maldet-clean.tgz Apr 04 2025 04:18:40 server maldet(5331): {sigup} signature set update completed Apr 04 2025 04:18:40 server maldet(5331): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 04 2025 04:18:41 server maldet(5624): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 04 2025 04:18:42 server maldet(5624): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 04 2025 04:18:42 server maldet(5624): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 04 2025 04:18:42 server maldet(5624): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 04 2025 04:18:42 server maldet(5624): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 04 2025 04:19:03 server maldet(5624): {scan} file list completed in 20s, found 552 files... Apr 04 2025 04:19:03 server maldet(5624): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 04 2025 04:19:03 server maldet(5624): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (552 files) in progress... Apr 04 2025 04:19:48 server maldet(5624): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 552, malware hits 0, cleaned hits 0, time 67s Apr 04 2025 04:19:48 server maldet(5624): {scan} scan report saved, to view run: maldet --report 250404-0418.5624 Apr 05 2025 03:48:51 server maldet(1247): {update} checking for available updates... Apr 05 2025 03:48:52 server maldet(1247): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 05 2025 03:48:52 server maldet(1247): {update} hashing install files and checking against server... Apr 05 2025 03:48:52 server maldet(1247): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 05 2025 03:48:52 server maldet(1247): {update} latest version already installed. Apr 05 2025 03:48:52 server maldet(1391): {sigup} performing signature update check... Apr 05 2025 03:48:52 server maldet(1391): {sigup} local signature set is version 20250404517655 Apr 05 2025 03:48:53 server maldet(1391): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 05 2025 03:48:53 server maldet(1391): {sigup} latest signature set already installed Apr 05 2025 03:48:54 server maldet(1536): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 05 2025 03:48:55 server maldet(1536): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 05 2025 03:48:55 server maldet(1536): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 05 2025 03:48:55 server maldet(1536): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 05 2025 03:48:55 server maldet(1536): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 05 2025 03:49:07 server maldet(1536): {scan} file list completed in 11s, found 483 files... Apr 05 2025 03:49:07 server maldet(1536): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 05 2025 03:49:07 server maldet(1536): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (483 files) in progress... Apr 05 2025 03:49:30 server maldet(1536): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 483, malware hits 0, cleaned hits 0, time 36s Apr 05 2025 03:49:30 server maldet(1536): {scan} scan report saved, to view run: maldet --report 250405-0348.1536 Apr 06 2025 04:37:35 server maldet(21726): {update} checking for available updates... Apr 06 2025 04:37:36 server maldet(21726): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 06 2025 04:37:36 server maldet(21726): {update} hashing install files and checking against server... Apr 06 2025 04:37:36 server maldet(21726): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 06 2025 04:37:36 server maldet(21726): {update} latest version already installed. Apr 06 2025 04:37:36 server maldet(21912): {sigup} performing signature update check... Apr 06 2025 04:37:36 server maldet(21912): {sigup} local signature set is version 20250404517655 Apr 06 2025 04:37:37 server maldet(21912): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 06 2025 04:37:37 server maldet(21912): {sigup} latest signature set already installed Apr 06 2025 04:37:40 server maldet(22066): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 06 2025 04:37:41 server maldet(22066): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 06 2025 04:37:42 server maldet(22066): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 06 2025 04:37:42 server maldet(22066): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 06 2025 04:37:42 server maldet(22066): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 06 2025 04:38:09 server maldet(22066): {scan} file list completed in 26s, found 355 files... Apr 06 2025 04:38:10 server maldet(22066): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 06 2025 04:38:10 server maldet(22066): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (355 files) in progress... Apr 06 2025 04:38:44 server maldet(22066): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 355, malware hits 0, cleaned hits 0, time 63s Apr 06 2025 04:38:44 server maldet(22066): {scan} scan report saved, to view run: maldet --report 250406-0437.22066 Apr 07 2025 03:55:50 server maldet(29493): {update} checking for available updates... Apr 07 2025 03:55:50 server maldet(29493): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 07 2025 03:55:50 server maldet(29493): {update} hashing install files and checking against server... Apr 07 2025 03:55:51 server maldet(29493): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 07 2025 03:55:51 server maldet(29493): {update} latest version already installed. Apr 07 2025 03:55:51 server maldet(29652): {sigup} performing signature update check... Apr 07 2025 03:55:51 server maldet(29652): {sigup} local signature set is version 20250404517655 Apr 07 2025 03:55:51 server maldet(29652): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 07 2025 03:55:51 server maldet(29652): {sigup} new signature set 202504071198007 available Apr 07 2025 03:55:51 server maldet(29652): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 07 2025 03:55:52 server maldet(29652): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 07 2025 03:55:52 server maldet(29652): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 07 2025 03:55:52 server maldet(29652): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 07 2025 03:55:53 server maldet(29652): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 07 2025 03:55:53 server maldet(29652): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 07 2025 03:55:53 server maldet(29652): {sigup} verified md5sum of maldet-sigpack.tgz Apr 07 2025 03:55:53 server maldet(29652): {sigup} unpacked and installed maldet-sigpack.tgz Apr 07 2025 03:55:53 server maldet(29652): {sigup} verified md5sum of maldet-clean.tgz Apr 07 2025 03:55:53 server maldet(29652): {sigup} unpacked and installed maldet-clean.tgz Apr 07 2025 03:55:53 server maldet(29652): {sigup} signature set update completed Apr 07 2025 03:55:53 server maldet(29652): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 07 2025 03:55:54 server maldet(29963): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 07 2025 03:55:55 server maldet(29963): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 07 2025 03:55:55 server maldet(29963): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 07 2025 03:55:55 server maldet(29963): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 07 2025 03:55:55 server maldet(29963): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 07 2025 03:56:19 server maldet(29963): {scan} file list completed in 24s, found 409 files... Apr 07 2025 03:56:19 server maldet(29963): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 07 2025 03:56:19 server maldet(29963): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (409 files) in progress... Apr 07 2025 03:56:45 server maldet(29963): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 409, malware hits 0, cleaned hits 0, time 51s Apr 07 2025 03:56:45 server maldet(29963): {scan} scan report saved, to view run: maldet --report 250407-0355.29963 Apr 08 2025 04:19:05 server maldet(9094): {update} checking for available updates... Apr 08 2025 04:19:05 server maldet(9094): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 08 2025 04:19:06 server maldet(9094): {update} hashing install files and checking against server... Apr 08 2025 04:19:06 server maldet(9094): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 08 2025 04:19:06 server maldet(9094): {update} latest version already installed. Apr 08 2025 04:19:06 server maldet(9241): {sigup} performing signature update check... Apr 08 2025 04:19:06 server maldet(9241): {sigup} local signature set is version 202504071198007 Apr 08 2025 04:19:06 server maldet(9241): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 08 2025 04:19:06 server maldet(9241): {sigup} latest signature set already installed Apr 08 2025 04:19:07 server maldet(9362): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 08 2025 04:19:08 server maldet(9362): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 08 2025 04:19:08 server maldet(9362): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 08 2025 04:19:08 server maldet(9362): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 08 2025 04:19:08 server maldet(9362): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 08 2025 04:19:18 server maldet(9362): {scan} file list completed in 10s, found 520 files... Apr 08 2025 04:19:18 server maldet(9362): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 08 2025 04:19:18 server maldet(9362): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (520 files) in progress... Apr 08 2025 04:19:50 server maldet(9362): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 520, malware hits 0, cleaned hits 0, time 43s Apr 08 2025 04:19:50 server maldet(9362): {scan} scan report saved, to view run: maldet --report 250408-0419.9362 Apr 09 2025 03:51:10 server maldet(19557): {update} checking for available updates... Apr 09 2025 03:51:11 server maldet(19557): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 09 2025 03:51:11 server maldet(19557): {update} hashing install files and checking against server... Apr 09 2025 03:51:11 server maldet(19557): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 09 2025 03:51:11 server maldet(19557): {update} latest version already installed. Apr 09 2025 03:51:12 server maldet(19732): {sigup} performing signature update check... Apr 09 2025 03:51:12 server maldet(19732): {sigup} local signature set is version 202504071198007 Apr 09 2025 03:51:12 server maldet(19732): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 09 2025 03:51:12 server maldet(19732): {sigup} latest signature set already installed Apr 09 2025 03:51:13 server maldet(19863): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 09 2025 03:51:14 server maldet(19863): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 09 2025 03:51:14 server maldet(19863): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 09 2025 03:51:14 server maldet(19863): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 09 2025 03:51:14 server maldet(19863): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 09 2025 03:51:23 server maldet(19863): {scan} file list completed in 9s, found 310 files... Apr 09 2025 03:51:23 server maldet(19863): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 09 2025 03:51:23 server maldet(19863): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (310 files) in progress... Apr 09 2025 03:51:42 server maldet(19863): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 310, malware hits 0, cleaned hits 0, time 29s Apr 09 2025 03:51:42 server maldet(19863): {scan} scan report saved, to view run: maldet --report 250409-0351.19863 Apr 10 2025 03:50:50 server maldet(10024): {update} checking for available updates... Apr 10 2025 03:50:51 server maldet(10024): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 10 2025 03:50:51 server maldet(10024): {update} hashing install files and checking against server... Apr 10 2025 03:50:51 server maldet(10024): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 10 2025 03:50:51 server maldet(10024): {update} latest version already installed. Apr 10 2025 03:50:51 server maldet(10158): {sigup} performing signature update check... Apr 10 2025 03:50:51 server maldet(10158): {sigup} local signature set is version 202504071198007 Apr 10 2025 03:50:52 server maldet(10158): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 10 2025 03:50:52 server maldet(10158): {sigup} new signature set 202504101870578 available Apr 10 2025 03:50:52 server maldet(10158): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 10 2025 03:50:52 server maldet(10158): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 10 2025 03:50:53 server maldet(10158): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 10 2025 03:50:53 server maldet(10158): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 10 2025 03:50:53 server maldet(10158): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 10 2025 03:50:53 server maldet(10158): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 10 2025 03:50:53 server maldet(10158): {sigup} verified md5sum of maldet-sigpack.tgz Apr 10 2025 03:50:54 server maldet(10158): {sigup} unpacked and installed maldet-sigpack.tgz Apr 10 2025 03:50:54 server maldet(10158): {sigup} verified md5sum of maldet-clean.tgz Apr 10 2025 03:50:54 server maldet(10158): {sigup} unpacked and installed maldet-clean.tgz Apr 10 2025 03:50:54 server maldet(10158): {sigup} signature set update completed Apr 10 2025 03:50:54 server maldet(10158): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 10 2025 03:50:55 server maldet(10469): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 10 2025 03:50:56 server maldet(10469): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 10 2025 03:50:56 server maldet(10469): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 10 2025 03:50:56 server maldet(10469): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 10 2025 03:50:56 server maldet(10469): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 10 2025 03:51:15 server maldet(10469): {scan} file list completed in 19s, found 510 files... Apr 10 2025 03:51:16 server maldet(10469): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 10 2025 03:51:16 server maldet(10469): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (510 files) in progress... Apr 10 2025 03:51:40 server maldet(10469): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 510, malware hits 0, cleaned hits 0, time 45s Apr 10 2025 03:51:40 server maldet(10469): {scan} scan report saved, to view run: maldet --report 250410-0350.10469 Apr 11 2025 04:08:45 server maldet(17483): {update} checking for available updates... Apr 11 2025 04:08:46 server maldet(17483): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 11 2025 04:08:46 server maldet(17483): {update} hashing install files and checking against server... Apr 11 2025 04:08:46 server maldet(17483): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 11 2025 04:08:46 server maldet(17483): {update} latest version already installed. Apr 11 2025 04:08:46 server maldet(17624): {sigup} performing signature update check... Apr 11 2025 04:08:46 server maldet(17624): {sigup} local signature set is version 202504101870578 Apr 11 2025 04:08:46 server maldet(17624): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 11 2025 04:08:46 server maldet(17624): {sigup} latest signature set already installed Apr 11 2025 04:08:47 server maldet(17752): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 11 2025 04:08:48 server maldet(17752): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 11 2025 04:08:48 server maldet(17752): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 11 2025 04:08:48 server maldet(17752): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 11 2025 04:08:48 server maldet(17752): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 11 2025 04:09:20 server maldet(17752): {scan} file list completed in 31s, found 682 files... Apr 11 2025 04:09:20 server maldet(17752): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 11 2025 04:09:20 server maldet(17752): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (682 files) in progress... Apr 11 2025 04:09:51 server maldet(17752): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 682, malware hits 0, cleaned hits 0, time 64s Apr 11 2025 04:09:51 server maldet(17752): {scan} scan report saved, to view run: maldet --report 250411-0408.17752 Apr 12 2025 03:40:05 server maldet(9933): {update} checking for available updates... Apr 12 2025 03:40:05 server maldet(9933): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 12 2025 03:40:05 server maldet(9933): {update} hashing install files and checking against server... Apr 12 2025 03:40:06 server maldet(9933): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 12 2025 03:40:06 server maldet(9933): {update} latest version already installed. Apr 12 2025 03:40:06 server maldet(10069): {sigup} performing signature update check... Apr 12 2025 03:40:06 server maldet(10069): {sigup} local signature set is version 202504101870578 Apr 12 2025 03:40:06 server maldet(10069): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 12 2025 03:40:07 server maldet(10069): {sigup} latest signature set already installed Apr 12 2025 03:40:07 server maldet(10183): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 12 2025 03:40:08 server maldet(10183): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 12 2025 03:40:08 server maldet(10183): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 12 2025 03:40:08 server maldet(10183): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 12 2025 03:40:08 server maldet(10183): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 12 2025 03:40:21 server maldet(10183): {scan} file list completed in 13s, found 498 files... Apr 12 2025 03:40:21 server maldet(10183): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 12 2025 03:40:21 server maldet(10183): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (498 files) in progress... Apr 12 2025 03:40:47 server maldet(10183): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 498, malware hits 0, cleaned hits 0, time 40s Apr 12 2025 03:40:47 server maldet(10183): {scan} scan report saved, to view run: maldet --report 250412-0340.10183 Apr 13 2025 04:01:34 server maldet(13974): {update} checking for available updates... Apr 13 2025 04:01:34 server maldet(13974): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 13 2025 04:01:34 server maldet(13974): {update} hashing install files and checking against server... Apr 13 2025 04:01:35 server maldet(13974): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 13 2025 04:01:35 server maldet(13974): {update} latest version already installed. Apr 13 2025 04:01:35 server maldet(14129): {sigup} performing signature update check... Apr 13 2025 04:01:35 server maldet(14129): {sigup} local signature set is version 202504101870578 Apr 13 2025 04:01:35 server maldet(14129): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 13 2025 04:01:36 server maldet(14129): {sigup} new signature set 202504132544993 available Apr 13 2025 04:01:36 server maldet(14129): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 13 2025 04:01:36 server maldet(14129): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 13 2025 04:01:37 server maldet(14129): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 13 2025 04:01:37 server maldet(14129): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 13 2025 04:01:37 server maldet(14129): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 13 2025 04:01:38 server maldet(14129): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 13 2025 04:01:38 server maldet(14129): {sigup} verified md5sum of maldet-sigpack.tgz Apr 13 2025 04:01:38 server maldet(14129): {sigup} unpacked and installed maldet-sigpack.tgz Apr 13 2025 04:01:39 server maldet(14129): {sigup} verified md5sum of maldet-clean.tgz Apr 13 2025 04:01:39 server maldet(14129): {sigup} unpacked and installed maldet-clean.tgz Apr 13 2025 04:01:39 server maldet(14129): {sigup} signature set update completed Apr 13 2025 04:01:40 server maldet(14129): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 13 2025 04:01:43 server maldet(14461): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 13 2025 04:01:45 server maldet(14461): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 13 2025 04:01:45 server maldet(14461): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 13 2025 04:01:45 server maldet(14461): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 13 2025 04:01:45 server maldet(14461): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 13 2025 04:02:12 server maldet(14461): {scan} file list completed in 26s, found 312 files... Apr 13 2025 04:02:12 server maldet(14461): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 13 2025 04:02:12 server maldet(14461): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (312 files) in progress... Apr 13 2025 04:02:39 server maldet(14461): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 312, malware hits 0, cleaned hits 0, time 56s Apr 13 2025 04:02:39 server maldet(14461): {scan} scan report saved, to view run: maldet --report 250413-0401.14461 Apr 14 2025 03:53:51 server maldet(10513): {update} checking for available updates... Apr 14 2025 03:53:52 server maldet(10513): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 14 2025 03:53:52 server maldet(10513): {update} hashing install files and checking against server... Apr 14 2025 03:53:53 server maldet(10513): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 14 2025 03:53:53 server maldet(10513): {update} latest version already installed. Apr 14 2025 03:53:53 server maldet(10671): {sigup} performing signature update check... Apr 14 2025 03:53:53 server maldet(10671): {sigup} local signature set is version 202504132544993 Apr 14 2025 03:53:55 server maldet(10671): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 14 2025 03:53:55 server maldet(10671): {sigup} latest signature set already installed Apr 14 2025 03:53:56 server maldet(10799): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 14 2025 03:53:59 server maldet(10799): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 14 2025 03:53:59 server maldet(10799): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 14 2025 03:53:59 server maldet(10799): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 14 2025 03:53:59 server maldet(10799): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 14 2025 03:54:56 server maldet(10799): {scan} file list completed in 57s, found 521 files... Apr 14 2025 03:54:56 server maldet(10799): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 14 2025 03:54:56 server maldet(10799): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (521 files) in progress... Apr 14 2025 03:55:41 server maldet(10799): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 521, malware hits 0, cleaned hits 0, time 105s Apr 14 2025 03:55:41 server maldet(10799): {scan} scan report saved, to view run: maldet --report 250414-0353.10799 Apr 15 2025 04:47:07 server maldet(25095): {update} checking for available updates... Apr 15 2025 04:47:11 server maldet(25095): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 15 2025 04:47:16 server maldet(25095): {update} hashing install files and checking against server... Apr 15 2025 04:47:19 server maldet(25095): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 15 2025 04:47:19 server maldet(25095): {update} latest version already installed. Apr 15 2025 04:47:21 server maldet(25313): {sigup} performing signature update check... Apr 15 2025 04:47:21 server maldet(25313): {sigup} local signature set is version 202504132544993 Apr 15 2025 04:47:23 server maldet(25313): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 15 2025 04:47:25 server maldet(25313): {sigup} latest signature set already installed Apr 15 2025 04:47:30 server maldet(25523): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 15 2025 04:47:40 server maldet(25523): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 15 2025 04:47:40 server maldet(25523): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 15 2025 04:47:40 server maldet(25523): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 15 2025 04:47:40 server maldet(25523): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 15 2025 05:16:29 server maldet(25523): {scan} file list completed in 1713s, found 13218 files... Apr 15 2025 05:16:30 server maldet(25523): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 15 2025 05:16:30 server maldet(25523): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (13218 files) in progress... Apr 15 2025 05:31:58 server maldet(25523): {scan} clamscan returned an error, check /usr/local/maldetect/logs/clamscan_log for details! Apr 15 2025 05:32:03 server maldet(25523): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 13218, malware hits 0, cleaned hits 0, time 2670s Apr 15 2025 05:32:03 server maldet(25523): {scan} scan report saved, to view run: maldet --report 250415-0447.25523 Apr 16 2025 03:50:45 server maldet(31478): {update} checking for available updates... Apr 16 2025 03:50:48 server maldet(31478): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 16 2025 03:50:48 server maldet(31478): {update} hashing install files and checking against server... Apr 16 2025 03:50:51 server maldet(31478): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 16 2025 03:50:52 server maldet(31478): {update} latest version already installed. Apr 16 2025 03:50:55 server maldet(31655): {sigup} performing signature update check... Apr 16 2025 03:50:55 server maldet(31655): {sigup} local signature set is version 202504132544993 Apr 16 2025 03:50:59 server maldet(31655): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 16 2025 03:50:59 server maldet(31655): {sigup} new signature set 202504163218957 available Apr 16 2025 03:50:59 server maldet(31655): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 16 2025 03:51:03 server maldet(31655): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 16 2025 03:51:05 server maldet(31655): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 16 2025 03:51:05 server maldet(31655): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 16 2025 03:51:07 server maldet(31655): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 16 2025 03:51:08 server maldet(31655): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 16 2025 03:51:09 server maldet(31655): {sigup} verified md5sum of maldet-sigpack.tgz Apr 16 2025 03:51:11 server maldet(31655): {sigup} unpacked and installed maldet-sigpack.tgz Apr 16 2025 03:51:15 server maldet(31655): {sigup} verified md5sum of maldet-clean.tgz Apr 16 2025 03:51:16 server maldet(31655): {sigup} unpacked and installed maldet-clean.tgz Apr 16 2025 03:51:16 server maldet(31655): {sigup} signature set update completed Apr 16 2025 03:51:17 server maldet(31655): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 16 2025 03:51:25 server maldet(32097): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 16 2025 03:51:35 server maldet(32097): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 16 2025 03:51:36 server maldet(32097): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 16 2025 03:51:37 server maldet(32097): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 16 2025 03:51:37 server maldet(32097): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 16 2025 03:52:46 server maldet(32097): {scan} file list completed in 69s, found 6713 files... Apr 16 2025 03:52:46 server maldet(32097): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 16 2025 03:52:46 server maldet(32097): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (6713 files) in progress... Apr 16 2025 03:55:26 server maldet(32097): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 6713, malware hits 0, cleaned hits 0, time 241s Apr 16 2025 03:55:26 server maldet(32097): {scan} scan report saved, to view run: maldet --report 250416-0351.32097 Apr 17 2025 03:45:04 server maldet(15560): {update} checking for available updates... Apr 17 2025 03:45:05 server maldet(15560): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 17 2025 03:45:05 server maldet(15560): {update} hashing install files and checking against server... Apr 17 2025 03:45:05 server maldet(15560): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 17 2025 03:45:05 server maldet(15560): {update} latest version already installed. Apr 17 2025 03:45:05 server maldet(15708): {sigup} performing signature update check... Apr 17 2025 03:45:05 server maldet(15708): {sigup} local signature set is version 202504163218957 Apr 17 2025 03:45:06 server maldet(15708): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 17 2025 03:45:06 server maldet(15708): {sigup} latest signature set already installed Apr 17 2025 03:45:07 server maldet(15881): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 17 2025 03:45:08 server maldet(15881): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 17 2025 03:45:08 server maldet(15881): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 17 2025 03:45:08 server maldet(15881): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 17 2025 03:45:09 server maldet(15881): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 17 2025 03:45:21 server maldet(15881): {scan} file list completed in 12s, found 1248 files... Apr 17 2025 03:45:21 server maldet(15881): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 17 2025 03:45:21 server maldet(15881): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1248 files) in progress... Apr 17 2025 03:46:39 server maldet(15881): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1248, malware hits 0, cleaned hits 0, time 92s Apr 17 2025 03:46:39 server maldet(15881): {scan} scan report saved, to view run: maldet --report 250417-0345.15881 Apr 18 2025 04:08:57 server maldet(8057): {update} checking for available updates... Apr 18 2025 04:08:58 server maldet(8057): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 18 2025 04:08:58 server maldet(8057): {update} hashing install files and checking against server... Apr 18 2025 04:08:58 server maldet(8057): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 18 2025 04:08:58 server maldet(8057): {update} latest version already installed. Apr 18 2025 04:08:58 server maldet(8646): {sigup} performing signature update check... Apr 18 2025 04:08:58 server maldet(8646): {sigup} local signature set is version 202504163218957 Apr 18 2025 04:08:59 server maldet(8646): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 18 2025 04:08:59 server maldet(8646): {sigup} latest signature set already installed Apr 18 2025 04:09:00 server maldet(9150): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 18 2025 04:09:03 server maldet(9150): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 18 2025 04:09:03 server maldet(9150): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 18 2025 04:09:03 server maldet(9150): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 18 2025 04:09:03 server maldet(9150): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 18 2025 04:09:36 server maldet(9150): {scan} file list completed in 32s, found 345 files... Apr 18 2025 04:09:36 server maldet(9150): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 18 2025 04:09:36 server maldet(9150): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (345 files) in progress... Apr 18 2025 04:09:56 server maldet(9150): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 345, malware hits 0, cleaned hits 0, time 56s Apr 18 2025 04:09:56 server maldet(9150): {scan} scan report saved, to view run: maldet --report 250418-0409.9150 Apr 19 2025 04:41:27 server maldet(24249): {update} checking for available updates... Apr 19 2025 04:41:28 server maldet(24249): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 19 2025 04:41:28 server maldet(24249): {update} hashing install files and checking against server... Apr 19 2025 04:41:28 server maldet(24249): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 19 2025 04:41:28 server maldet(24249): {update} latest version already installed. Apr 19 2025 04:41:28 server maldet(24391): {sigup} performing signature update check... Apr 19 2025 04:41:28 server maldet(24391): {sigup} local signature set is version 202504163218957 Apr 19 2025 04:41:29 server maldet(24391): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 19 2025 04:41:29 server maldet(24391): {sigup} new signature set 20250419480331 available Apr 19 2025 04:41:29 server maldet(24391): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 19 2025 04:41:29 server maldet(24391): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 19 2025 04:41:30 server maldet(24391): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 19 2025 04:41:30 server maldet(24391): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 19 2025 04:41:30 server maldet(24391): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 19 2025 04:41:30 server maldet(24391): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 19 2025 04:41:30 server maldet(24391): {sigup} verified md5sum of maldet-sigpack.tgz Apr 19 2025 04:41:30 server maldet(24391): {sigup} unpacked and installed maldet-sigpack.tgz Apr 19 2025 04:41:31 server maldet(24391): {sigup} verified md5sum of maldet-clean.tgz Apr 19 2025 04:41:31 server maldet(24391): {sigup} unpacked and installed maldet-clean.tgz Apr 19 2025 04:41:31 server maldet(24391): {sigup} signature set update completed Apr 19 2025 04:41:31 server maldet(24391): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 19 2025 04:41:32 server maldet(24664): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 19 2025 04:41:34 server maldet(24664): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 19 2025 04:41:35 server maldet(24664): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 19 2025 04:41:35 server maldet(24664): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 19 2025 04:41:35 server maldet(24664): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 19 2025 04:41:52 server maldet(24664): {scan} file list completed in 16s, found 716 files... Apr 19 2025 04:41:52 server maldet(24664): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 19 2025 04:41:52 server maldet(24664): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (716 files) in progress... Apr 19 2025 04:42:44 server maldet(24664): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 716, malware hits 0, cleaned hits 0, time 72s Apr 19 2025 04:42:44 server maldet(24664): {scan} scan report saved, to view run: maldet --report 250419-0441.24664 Apr 20 2025 03:34:46 server maldet(15720): {update} checking for available updates... Apr 20 2025 03:34:47 server maldet(15720): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 20 2025 03:34:47 server maldet(15720): {update} hashing install files and checking against server... Apr 20 2025 03:34:47 server maldet(15720): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 20 2025 03:34:47 server maldet(15720): {update} latest version already installed. Apr 20 2025 03:34:47 server maldet(15871): {sigup} performing signature update check... Apr 20 2025 03:34:47 server maldet(15871): {sigup} local signature set is version 20250419480331 Apr 20 2025 03:34:48 server maldet(15871): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 20 2025 03:34:48 server maldet(15871): {sigup} latest signature set already installed Apr 20 2025 03:34:49 server maldet(15995): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 20 2025 03:34:50 server maldet(15995): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 20 2025 03:34:50 server maldet(15995): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 20 2025 03:34:50 server maldet(15995): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 20 2025 03:34:50 server maldet(15995): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 20 2025 03:35:00 server maldet(15995): {scan} file list completed in 9s, found 576 files... Apr 20 2025 03:35:00 server maldet(15995): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 20 2025 03:35:00 server maldet(15995): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (576 files) in progress... Apr 20 2025 03:35:44 server maldet(15995): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 576, malware hits 0, cleaned hits 0, time 55s Apr 20 2025 03:35:44 server maldet(15995): {scan} scan report saved, to view run: maldet --report 250420-0334.15995 Apr 21 2025 04:02:26 server maldet(14772): {update} checking for available updates... Apr 21 2025 04:02:26 server maldet(14772): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 21 2025 04:02:26 server maldet(14772): {update} hashing install files and checking against server... Apr 21 2025 04:02:26 server maldet(14772): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 21 2025 04:02:26 server maldet(14772): {update} latest version already installed. Apr 21 2025 04:02:27 server maldet(14927): {sigup} performing signature update check... Apr 21 2025 04:02:27 server maldet(14927): {sigup} local signature set is version 20250419480331 Apr 21 2025 04:02:27 server maldet(14927): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 21 2025 04:02:27 server maldet(14927): {sigup} latest signature set already installed Apr 21 2025 04:02:28 server maldet(15054): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 21 2025 04:02:29 server maldet(15054): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 21 2025 04:02:29 server maldet(15054): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 21 2025 04:02:29 server maldet(15054): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 21 2025 04:02:29 server maldet(15054): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 21 2025 04:02:40 server maldet(15054): {scan} file list completed in 11s, found 440 files... Apr 21 2025 04:02:40 server maldet(15054): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 21 2025 04:02:40 server maldet(15054): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (440 files) in progress... Apr 21 2025 04:03:09 server maldet(15054): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 440, malware hits 0, cleaned hits 0, time 40s Apr 21 2025 04:03:09 server maldet(15054): {scan} scan report saved, to view run: maldet --report 250421-0402.15054 Apr 22 2025 03:35:54 server maldet(13621): {update} checking for available updates... Apr 22 2025 03:35:55 server maldet(13621): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 22 2025 03:35:55 server maldet(13621): {update} hashing install files and checking against server... Apr 22 2025 03:35:57 server maldet(13621): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 22 2025 03:35:58 server maldet(13621): {update} latest version already installed. Apr 22 2025 03:35:58 server maldet(13801): {sigup} performing signature update check... Apr 22 2025 03:35:59 server maldet(13801): {sigup} local signature set is version 20250419480331 Apr 22 2025 03:35:59 server maldet(13801): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 22 2025 03:36:00 server maldet(13801): {sigup} new signature set 202504221155028 available Apr 22 2025 03:36:00 server maldet(13801): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 22 2025 03:36:00 server maldet(13801): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 22 2025 03:36:01 server maldet(13801): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 22 2025 03:36:01 server maldet(13801): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 22 2025 03:36:01 server maldet(13801): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 22 2025 03:36:02 server maldet(13801): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 22 2025 03:36:02 server maldet(13801): {sigup} verified md5sum of maldet-sigpack.tgz Apr 22 2025 03:36:02 server maldet(13801): {sigup} unpacked and installed maldet-sigpack.tgz Apr 22 2025 03:36:03 server maldet(13801): {sigup} verified md5sum of maldet-clean.tgz Apr 22 2025 03:36:03 server maldet(13801): {sigup} unpacked and installed maldet-clean.tgz Apr 22 2025 03:36:03 server maldet(13801): {sigup} signature set update completed Apr 22 2025 03:36:03 server maldet(13801): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 22 2025 03:36:04 server maldet(14102): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 22 2025 03:36:07 server maldet(14102): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 22 2025 03:36:07 server maldet(14102): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 22 2025 03:36:07 server maldet(14102): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 22 2025 03:36:07 server maldet(14102): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 22 2025 03:37:02 server maldet(14102): {scan} file list completed in 54s, found 389 files... Apr 22 2025 03:37:02 server maldet(14102): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 22 2025 03:37:02 server maldet(14102): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (389 files) in progress... Apr 22 2025 03:37:33 server maldet(14102): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 389, malware hits 0, cleaned hits 0, time 89s Apr 22 2025 03:37:33 server maldet(14102): {scan} scan report saved, to view run: maldet --report 250422-0336.14102 Apr 23 2025 04:12:52 server maldet(14936): {update} checking for available updates... Apr 23 2025 04:12:53 server maldet(14936): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 23 2025 04:12:53 server maldet(14936): {update} hashing install files and checking against server... Apr 23 2025 04:12:54 server maldet(14936): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 23 2025 04:12:54 server maldet(14936): {update} latest version already installed. Apr 23 2025 04:12:55 server maldet(15321): {sigup} performing signature update check... Apr 23 2025 04:12:55 server maldet(15321): {sigup} local signature set is version 202504221155028 Apr 23 2025 04:12:55 server maldet(15321): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 23 2025 04:12:55 server maldet(15321): {sigup} latest signature set already installed Apr 23 2025 04:12:57 server maldet(15681): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 23 2025 04:13:02 server maldet(15681): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 23 2025 04:13:02 server maldet(15681): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 23 2025 04:13:02 server maldet(15681): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 23 2025 04:13:03 server maldet(15681): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 23 2025 04:13:24 server maldet(15681): {scan} file list completed in 20s, found 10609 files... Apr 23 2025 04:13:24 server maldet(15681): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 23 2025 04:13:24 server maldet(15681): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (10609 files) in progress... Apr 23 2025 04:21:11 server maldet(15681): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 10609, malware hits 0, cleaned hits 0, time 494s Apr 23 2025 04:21:11 server maldet(15681): {scan} scan report saved, to view run: maldet --report 250423-0412.15681 Apr 24 2025 04:16:35 server maldet(31316): {update} checking for available updates... Apr 24 2025 04:16:36 server maldet(31316): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 24 2025 04:16:36 server maldet(31316): {update} hashing install files and checking against server... Apr 24 2025 04:16:36 server maldet(31316): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 24 2025 04:16:36 server maldet(31316): {update} latest version already installed. Apr 24 2025 04:16:36 server maldet(31454): {sigup} performing signature update check... Apr 24 2025 04:16:36 server maldet(31454): {sigup} local signature set is version 202504221155028 Apr 24 2025 04:16:37 server maldet(31454): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 24 2025 04:16:37 server maldet(31454): {sigup} latest signature set already installed Apr 24 2025 04:16:38 server maldet(31568): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 24 2025 04:16:39 server maldet(31568): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 24 2025 04:16:39 server maldet(31568): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 24 2025 04:16:39 server maldet(31568): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 24 2025 04:16:39 server maldet(31568): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 24 2025 04:16:48 server maldet(31568): {scan} file list completed in 8s, found 490 files... Apr 24 2025 04:16:48 server maldet(31568): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 24 2025 04:16:48 server maldet(31568): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (490 files) in progress... Apr 24 2025 04:17:25 server maldet(31568): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 490, malware hits 0, cleaned hits 0, time 47s Apr 24 2025 04:17:25 server maldet(31568): {scan} scan report saved, to view run: maldet --report 250424-0416.31568 Apr 25 2025 04:10:32 server maldet(20937): {update} checking for available updates... Apr 25 2025 04:10:33 server maldet(20937): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 25 2025 04:10:33 server maldet(20937): {update} hashing install files and checking against server... Apr 25 2025 04:10:34 server maldet(20937): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 25 2025 04:10:34 server maldet(20937): {update} latest version already installed. Apr 25 2025 04:10:34 server maldet(21076): {sigup} performing signature update check... Apr 25 2025 04:10:34 server maldet(21076): {sigup} local signature set is version 202504221155028 Apr 25 2025 04:10:35 server maldet(21076): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 25 2025 04:10:35 server maldet(21076): {sigup} new signature set 202504251845085 available Apr 25 2025 04:10:35 server maldet(21076): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 25 2025 04:10:36 server maldet(21076): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 25 2025 04:10:36 server maldet(21076): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 25 2025 04:10:36 server maldet(21076): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 25 2025 04:10:36 server maldet(21076): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 25 2025 04:10:37 server maldet(21076): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 25 2025 04:10:37 server maldet(21076): {sigup} verified md5sum of maldet-sigpack.tgz Apr 25 2025 04:10:37 server maldet(21076): {sigup} unpacked and installed maldet-sigpack.tgz Apr 25 2025 04:10:38 server maldet(21076): {sigup} verified md5sum of maldet-clean.tgz Apr 25 2025 04:10:38 server maldet(21076): {sigup} unpacked and installed maldet-clean.tgz Apr 25 2025 04:10:38 server maldet(21076): {sigup} signature set update completed Apr 25 2025 04:10:38 server maldet(21076): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 25 2025 04:10:41 server maldet(21362): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 25 2025 04:10:43 server maldet(21362): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 25 2025 04:10:43 server maldet(21362): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 25 2025 04:10:44 server maldet(21362): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 25 2025 04:10:44 server maldet(21362): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 25 2025 04:11:55 server maldet(21362): {scan} file list completed in 70s, found 800 files... Apr 25 2025 04:11:55 server maldet(21362): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 25 2025 04:11:55 server maldet(21362): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (800 files) in progress... Apr 25 2025 04:13:17 server maldet(21362): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 800, malware hits 0, cleaned hits 0, time 156s Apr 25 2025 04:13:17 server maldet(21362): {scan} scan report saved, to view run: maldet --report 250425-0410.21362 Apr 26 2025 03:22:41 server maldet(3649): {mon} could not find inotifywait command, install yum package inotify-tools or download from https://github.com/rvoicilas/inotify-tools/wiki/ Apr 26 2025 04:25:39 server maldet(738): {update} checking for available updates... Apr 26 2025 04:25:39 server maldet(738): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 26 2025 04:25:39 server maldet(738): {update} hashing install files and checking against server... Apr 26 2025 04:25:39 server maldet(738): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 26 2025 04:25:39 server maldet(738): {update} latest version already installed. Apr 26 2025 04:25:40 server maldet(848): {sigup} performing signature update check... Apr 26 2025 04:25:40 server maldet(848): {sigup} local signature set is version 202504251845085 Apr 26 2025 04:25:40 server maldet(848): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 26 2025 04:25:40 server maldet(848): {sigup} latest signature set already installed Apr 26 2025 04:25:40 server maldet(937): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 26 2025 04:25:40 server maldet(937): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 26 2025 04:25:40 server maldet(937): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 26 2025 04:25:40 server maldet(937): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 26 2025 04:25:40 server maldet(937): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 26 2025 04:25:55 server maldet(937): {scan} file list completed in 15s, found 4535 files... Apr 26 2025 04:25:55 server maldet(937): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 26 2025 04:25:55 server maldet(937): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4535 files) in progress... Apr 26 2025 04:28:35 server maldet(937): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4535, malware hits 0, cleaned hits 0, time 175s Apr 26 2025 04:28:35 server maldet(937): {scan} scan report saved, to view run: maldet --report 250426-0425.937 Apr 27 2025 04:21:11 server maldet(6779): {update} checking for available updates... Apr 27 2025 04:21:11 server maldet(6779): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 27 2025 04:21:11 server maldet(6779): {update} hashing install files and checking against server... Apr 27 2025 04:21:11 server maldet(6779): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 27 2025 04:21:11 server maldet(6779): {update} latest version already installed. Apr 27 2025 04:21:11 server maldet(6893): {sigup} performing signature update check... Apr 27 2025 04:21:11 server maldet(6893): {sigup} local signature set is version 202504251845085 Apr 27 2025 04:21:12 server maldet(6893): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 27 2025 04:21:12 server maldet(6893): {sigup} latest signature set already installed Apr 27 2025 04:21:12 server maldet(6982): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 27 2025 04:21:12 server maldet(6982): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 27 2025 04:21:12 server maldet(6982): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 27 2025 04:21:12 server maldet(6982): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 27 2025 04:21:12 server maldet(6982): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 27 2025 04:21:20 server maldet(6982): {scan} file list completed in 8s, found 458 files... Apr 27 2025 04:21:20 server maldet(6982): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 27 2025 04:21:20 server maldet(6982): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (458 files) in progress... Apr 27 2025 04:21:43 server maldet(6982): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 458, malware hits 0, cleaned hits 0, time 31s Apr 27 2025 04:21:43 server maldet(6982): {scan} scan report saved, to view run: maldet --report 250427-0421.6982 Apr 28 2025 03:59:21 server maldet(27850): {update} checking for available updates... Apr 28 2025 03:59:22 server maldet(27850): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 28 2025 03:59:22 server maldet(27850): {update} hashing install files and checking against server... Apr 28 2025 03:59:23 server maldet(27850): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 28 2025 03:59:23 server maldet(27850): {update} latest version already installed. Apr 28 2025 03:59:23 server maldet(27963): {sigup} performing signature update check... Apr 28 2025 03:59:23 server maldet(27963): {sigup} local signature set is version 202504251845085 Apr 28 2025 03:59:24 server maldet(27963): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 28 2025 03:59:24 server maldet(27963): {sigup} new signature set 202504282520736 available Apr 28 2025 03:59:24 server maldet(27963): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 28 2025 03:59:25 server maldet(27963): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Apr 28 2025 03:59:25 server maldet(27963): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Apr 28 2025 03:59:25 server maldet(27963): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 28 2025 03:59:26 server maldet(27963): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Apr 28 2025 03:59:26 server maldet(27963): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Apr 28 2025 03:59:26 server maldet(27963): {sigup} verified md5sum of maldet-sigpack.tgz Apr 28 2025 03:59:27 server maldet(27963): {sigup} unpacked and installed maldet-sigpack.tgz Apr 28 2025 03:59:27 server maldet(27963): {sigup} verified md5sum of maldet-clean.tgz Apr 28 2025 03:59:27 server maldet(27963): {sigup} unpacked and installed maldet-clean.tgz Apr 28 2025 03:59:27 server maldet(27963): {sigup} signature set update completed Apr 28 2025 03:59:27 server maldet(27963): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 28 2025 03:59:31 server maldet(28173): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 28 2025 03:59:34 server maldet(28173): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 28 2025 03:59:34 server maldet(28173): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 28 2025 03:59:34 server maldet(28173): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 28 2025 03:59:34 server maldet(28173): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 28 2025 04:01:52 server maldet(28173): {scan} file list completed in 138s, found 335 files... Apr 28 2025 04:01:52 server maldet(28173): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 28 2025 04:01:52 server maldet(28173): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (335 files) in progress... Apr 28 2025 04:02:27 server maldet(28173): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 335, malware hits 0, cleaned hits 0, time 176s Apr 28 2025 04:02:27 server maldet(28173): {scan} scan report saved, to view run: maldet --report 250428-0359.28173 Apr 29 2025 04:07:57 server maldet(30555): {update} checking for available updates... Apr 29 2025 04:07:57 server maldet(30555): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 29 2025 04:07:57 server maldet(30555): {update} hashing install files and checking against server... Apr 29 2025 04:07:58 server maldet(30555): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 29 2025 04:07:58 server maldet(30555): {update} latest version already installed. Apr 29 2025 04:07:58 server maldet(31155): {sigup} performing signature update check... Apr 29 2025 04:07:58 server maldet(31155): {sigup} local signature set is version 202504282520736 Apr 29 2025 04:07:58 server maldet(31155): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 29 2025 04:07:58 server maldet(31155): {sigup} latest signature set already installed Apr 29 2025 04:07:59 server maldet(31487): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 29 2025 04:07:59 server maldet(31487): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 29 2025 04:07:59 server maldet(31487): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 29 2025 04:07:59 server maldet(31487): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 29 2025 04:07:59 server maldet(31487): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 29 2025 04:08:22 server maldet(31487): {scan} file list completed in 23s, found 772 files... Apr 29 2025 04:08:22 server maldet(31487): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 29 2025 04:08:22 server maldet(31487): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (772 files) in progress... Apr 29 2025 04:09:19 server maldet(31487): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 772, malware hits 0, cleaned hits 0, time 80s Apr 29 2025 04:09:19 server maldet(31487): {scan} scan report saved, to view run: maldet --report 250429-0407.31487 Apr 30 2025 04:22:42 server maldet(15158): {update} checking for available updates... Apr 30 2025 04:22:42 server maldet(15158): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Apr 30 2025 04:22:43 server maldet(15158): {update} hashing install files and checking against server... Apr 30 2025 04:22:43 server maldet(15158): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Apr 30 2025 04:22:43 server maldet(15158): {update} latest version already installed. Apr 30 2025 04:22:43 server maldet(15907): {sigup} performing signature update check... Apr 30 2025 04:22:43 server maldet(15907): {sigup} local signature set is version 202504282520736 Apr 30 2025 04:22:43 server maldet(15907): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Apr 30 2025 04:22:43 server maldet(15907): {sigup} latest signature set already installed Apr 30 2025 04:22:43 server maldet(16386): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Apr 30 2025 04:22:44 server maldet(16386): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Apr 30 2025 04:22:44 server maldet(16386): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Apr 30 2025 04:22:44 server maldet(16386): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Apr 30 2025 04:22:44 server maldet(16386): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Apr 30 2025 04:22:51 server maldet(16386): {scan} file list completed in 7s, found 9730 files... Apr 30 2025 04:22:51 server maldet(16386): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Apr 30 2025 04:22:51 server maldet(16386): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (9730 files) in progress... Apr 30 2025 04:27:26 server maldet(16386): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 9730, malware hits 0, cleaned hits 0, time 283s Apr 30 2025 04:27:26 server maldet(16386): {scan} scan report saved, to view run: maldet --report 250430-0422.16386 May 01 2025 04:19:25 server maldet(9182): {update} checking for available updates... May 01 2025 04:19:25 server maldet(9182): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 01 2025 04:19:25 server maldet(9182): {update} hashing install files and checking against server... May 01 2025 04:19:25 server maldet(9182): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 01 2025 04:19:25 server maldet(9182): {update} latest version already installed. May 01 2025 04:19:26 server maldet(9291): {sigup} performing signature update check... May 01 2025 04:19:26 server maldet(9291): {sigup} local signature set is version 202504282520736 May 01 2025 04:19:26 server maldet(9291): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 01 2025 04:19:26 server maldet(9291): {sigup} new signature set 202505013184135 available May 01 2025 04:19:26 server maldet(9291): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 01 2025 04:19:27 server maldet(9291): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 01 2025 04:19:27 server maldet(9291): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 01 2025 04:19:27 server maldet(9291): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 01 2025 04:19:27 server maldet(9291): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 01 2025 04:19:28 server maldet(9291): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 01 2025 04:19:28 server maldet(9291): {sigup} verified md5sum of maldet-sigpack.tgz May 01 2025 04:19:28 server maldet(9291): {sigup} unpacked and installed maldet-sigpack.tgz May 01 2025 04:19:28 server maldet(9291): {sigup} verified md5sum of maldet-clean.tgz May 01 2025 04:19:28 server maldet(9291): {sigup} unpacked and installed maldet-clean.tgz May 01 2025 04:19:28 server maldet(9291): {sigup} signature set update completed May 01 2025 04:19:28 server maldet(9291): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 01 2025 04:19:28 server maldet(9495): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 01 2025 04:19:29 server maldet(9495): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 01 2025 04:19:29 server maldet(9495): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 01 2025 04:19:29 server maldet(9495): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 01 2025 04:19:29 server maldet(9495): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 01 2025 04:19:56 server maldet(9495): {scan} file list completed in 27s, found 608 files... May 01 2025 04:19:56 server maldet(9495): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 01 2025 04:19:56 server maldet(9495): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (608 files) in progress... May 01 2025 04:20:35 server maldet(9495): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 608, malware hits 0, cleaned hits 0, time 67s May 01 2025 04:20:35 server maldet(9495): {scan} scan report saved, to view run: maldet --report 250501-0419.9495 May 02 2025 04:21:47 server maldet(23109): {update} checking for available updates... May 02 2025 04:21:47 server maldet(23109): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 02 2025 04:21:47 server maldet(23109): {update} hashing install files and checking against server... May 02 2025 04:21:48 server maldet(23109): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 02 2025 04:21:48 server maldet(23109): {update} latest version already installed. May 02 2025 04:21:48 server maldet(23224): {sigup} performing signature update check... May 02 2025 04:21:48 server maldet(23224): {sigup} local signature set is version 202505013184135 May 02 2025 04:21:48 server maldet(23224): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 02 2025 04:21:48 server maldet(23224): {sigup} latest signature set already installed May 02 2025 04:21:49 server maldet(23322): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 02 2025 04:21:49 server maldet(23322): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 02 2025 04:21:49 server maldet(23322): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 02 2025 04:21:49 server maldet(23322): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 02 2025 04:21:49 server maldet(23322): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 02 2025 04:21:58 server maldet(23322): {scan} file list completed in 9s, found 1032 files... May 02 2025 04:21:58 server maldet(23322): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 02 2025 04:21:58 server maldet(23322): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1032 files) in progress... May 02 2025 04:22:33 server maldet(23322): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1032, malware hits 0, cleaned hits 0, time 44s May 02 2025 04:22:33 server maldet(23322): {scan} scan report saved, to view run: maldet --report 250502-0421.23322 May 03 2025 03:57:05 server maldet(20652): {update} checking for available updates... May 03 2025 03:57:06 server maldet(20652): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 03 2025 03:57:06 server maldet(20652): {update} hashing install files and checking against server... May 03 2025 03:57:06 server maldet(20652): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 03 2025 03:57:06 server maldet(20652): {update} latest version already installed. May 03 2025 03:57:06 server maldet(20761): {sigup} performing signature update check... May 03 2025 03:57:06 server maldet(20761): {sigup} local signature set is version 202505013184135 May 03 2025 03:57:07 server maldet(20761): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 03 2025 03:57:07 server maldet(20761): {sigup} latest signature set already installed May 03 2025 03:57:07 server maldet(20850): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 03 2025 03:57:07 server maldet(20850): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 03 2025 03:57:07 server maldet(20850): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 03 2025 03:57:07 server maldet(20850): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 03 2025 03:57:07 server maldet(20850): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 03 2025 03:57:22 server maldet(20850): {scan} file list completed in 15s, found 605 files... May 03 2025 03:57:22 server maldet(20850): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 03 2025 03:57:22 server maldet(20850): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (605 files) in progress... May 03 2025 03:58:04 server maldet(20850): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 605, malware hits 0, cleaned hits 0, time 57s May 03 2025 03:58:04 server maldet(20850): {scan} scan report saved, to view run: maldet --report 250503-0357.20850 May 04 2025 03:53:55 server maldet(7965): {update} checking for available updates... May 04 2025 03:53:55 server maldet(7965): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 04 2025 03:53:55 server maldet(7965): {update} hashing install files and checking against server... May 04 2025 03:53:55 server maldet(7965): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 04 2025 03:53:55 server maldet(7965): {update} latest version already installed. May 04 2025 03:53:56 server maldet(8075): {sigup} performing signature update check... May 04 2025 03:53:56 server maldet(8075): {sigup} local signature set is version 202505013184135 May 04 2025 03:53:56 server maldet(8075): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 04 2025 03:53:56 server maldet(8075): {sigup} new signature set 20250504486927 available May 04 2025 03:53:56 server maldet(8075): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 04 2025 03:53:56 server maldet(8075): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 04 2025 03:53:57 server maldet(8075): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 04 2025 03:53:57 server maldet(8075): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 04 2025 03:53:57 server maldet(8075): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 04 2025 03:53:58 server maldet(8075): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 04 2025 03:53:58 server maldet(8075): {sigup} verified md5sum of maldet-sigpack.tgz May 04 2025 03:53:58 server maldet(8075): {sigup} unpacked and installed maldet-sigpack.tgz May 04 2025 03:53:58 server maldet(8075): {sigup} verified md5sum of maldet-clean.tgz May 04 2025 03:53:58 server maldet(8075): {sigup} unpacked and installed maldet-clean.tgz May 04 2025 03:53:58 server maldet(8075): {sigup} signature set update completed May 04 2025 03:53:58 server maldet(8075): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 04 2025 03:53:58 server maldet(8283): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 04 2025 03:53:59 server maldet(8283): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 04 2025 03:53:59 server maldet(8283): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 04 2025 03:53:59 server maldet(8283): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 04 2025 03:53:59 server maldet(8283): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 04 2025 03:54:08 server maldet(8283): {scan} file list completed in 9s, found 450 files... May 04 2025 03:54:08 server maldet(8283): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 04 2025 03:54:08 server maldet(8283): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (450 files) in progress... May 04 2025 03:54:38 server maldet(8283): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 450, malware hits 0, cleaned hits 0, time 40s May 04 2025 03:54:38 server maldet(8283): {scan} scan report saved, to view run: maldet --report 250504-0353.8283 May 05 2025 04:01:12 server maldet(31428): {update} checking for available updates... May 05 2025 04:01:12 server maldet(31428): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 05 2025 04:01:12 server maldet(31428): {update} hashing install files and checking against server... May 05 2025 04:01:13 server maldet(31428): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 05 2025 04:01:13 server maldet(31428): {update} latest version already installed. May 05 2025 04:01:13 server maldet(31549): {sigup} performing signature update check... May 05 2025 04:01:13 server maldet(31549): {sigup} local signature set is version 20250504486927 May 05 2025 04:01:13 server maldet(31549): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 05 2025 04:01:13 server maldet(31549): {sigup} latest signature set already installed May 05 2025 04:01:13 server maldet(31640): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 05 2025 04:01:14 server maldet(31640): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 05 2025 04:01:14 server maldet(31640): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 05 2025 04:01:14 server maldet(31640): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 05 2025 04:01:14 server maldet(31640): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 05 2025 04:01:23 server maldet(31640): {scan} file list completed in 9s, found 396 files... May 05 2025 04:01:23 server maldet(31640): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 05 2025 04:01:23 server maldet(31640): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (396 files) in progress... May 05 2025 04:01:50 server maldet(31640): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 396, malware hits 0, cleaned hits 0, time 36s May 05 2025 04:01:50 server maldet(31640): {scan} scan report saved, to view run: maldet --report 250505-0401.31640 May 06 2025 03:42:52 server maldet(28317): {update} checking for available updates... May 06 2025 03:42:53 server maldet(28317): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 06 2025 03:42:53 server maldet(28317): {update} hashing install files and checking against server... May 06 2025 03:42:53 server maldet(28317): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 06 2025 03:42:53 server maldet(28317): {update} latest version already installed. May 06 2025 03:42:53 server maldet(28435): {sigup} performing signature update check... May 06 2025 03:42:53 server maldet(28435): {sigup} local signature set is version 20250504486927 May 06 2025 03:42:53 server maldet(28435): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 06 2025 03:42:53 server maldet(28435): {sigup} latest signature set already installed May 06 2025 03:42:54 server maldet(28533): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 06 2025 03:42:54 server maldet(28533): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 06 2025 03:42:54 server maldet(28533): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 06 2025 03:42:54 server maldet(28533): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 06 2025 03:42:54 server maldet(28533): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 06 2025 03:43:04 server maldet(28533): {scan} file list completed in 10s, found 610 files... May 06 2025 03:43:04 server maldet(28533): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 06 2025 03:43:04 server maldet(28533): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (610 files) in progress... May 06 2025 03:43:34 server maldet(28533): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 610, malware hits 0, cleaned hits 0, time 40s May 06 2025 03:43:34 server maldet(28533): {scan} scan report saved, to view run: maldet --report 250506-0342.28533 May 07 2025 04:29:58 server maldet(2263): {update} checking for available updates... May 07 2025 04:29:58 server maldet(2263): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 07 2025 04:29:58 server maldet(2263): {update} hashing install files and checking against server... May 07 2025 04:29:59 server maldet(2263): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 07 2025 04:29:59 server maldet(2263): {update} latest version already installed. May 07 2025 04:29:59 server maldet(2380): {sigup} performing signature update check... May 07 2025 04:29:59 server maldet(2380): {sigup} local signature set is version 20250504486927 May 07 2025 04:29:59 server maldet(2380): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 07 2025 04:29:59 server maldet(2380): {sigup} new signature set 202505071163993 available May 07 2025 04:29:59 server maldet(2380): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 07 2025 04:30:00 server maldet(2380): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 07 2025 04:30:00 server maldet(2380): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 07 2025 04:30:00 server maldet(2380): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 07 2025 04:30:01 server maldet(2380): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 07 2025 04:30:01 server maldet(2380): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 07 2025 04:30:01 server maldet(2380): {sigup} verified md5sum of maldet-sigpack.tgz May 07 2025 04:30:01 server maldet(2380): {sigup} unpacked and installed maldet-sigpack.tgz May 07 2025 04:30:02 server maldet(2380): {sigup} verified md5sum of maldet-clean.tgz May 07 2025 04:30:02 server maldet(2380): {sigup} unpacked and installed maldet-clean.tgz May 07 2025 04:30:02 server maldet(2380): {sigup} signature set update completed May 07 2025 04:30:02 server maldet(2380): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 07 2025 04:30:03 server maldet(2750): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 07 2025 04:30:04 server maldet(2750): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 07 2025 04:30:04 server maldet(2750): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 07 2025 04:30:04 server maldet(2750): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 07 2025 04:30:04 server maldet(2750): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 07 2025 04:30:25 server maldet(2750): {scan} file list completed in 20s, found 992 files... May 07 2025 04:30:25 server maldet(2750): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 07 2025 04:30:25 server maldet(2750): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (992 files) in progress... May 07 2025 04:31:08 server maldet(2750): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 992, malware hits 0, cleaned hits 0, time 65s May 07 2025 04:31:09 server maldet(2750): {scan} scan report saved, to view run: maldet --report 250507-0430.2750 May 08 2025 04:14:48 server maldet(8118): {update} checking for available updates... May 08 2025 04:14:48 server maldet(8118): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 08 2025 04:14:48 server maldet(8118): {update} hashing install files and checking against server... May 08 2025 04:14:49 server maldet(8118): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 08 2025 04:14:49 server maldet(8118): {update} latest version already installed. May 08 2025 04:14:49 server maldet(8244): {sigup} performing signature update check... May 08 2025 04:14:49 server maldet(8244): {sigup} local signature set is version 202505071163993 May 08 2025 04:14:49 server maldet(8244): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 08 2025 04:14:49 server maldet(8244): {sigup} latest signature set already installed May 08 2025 04:14:50 server maldet(8354): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 08 2025 04:14:52 server maldet(8354): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 08 2025 04:14:52 server maldet(8354): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 08 2025 04:14:52 server maldet(8354): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 08 2025 04:14:52 server maldet(8354): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 08 2025 04:15:12 server maldet(8354): {scan} file list completed in 20s, found 742 files... May 08 2025 04:15:12 server maldet(8354): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 08 2025 04:15:12 server maldet(8354): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (742 files) in progress... May 08 2025 04:16:13 server maldet(8354): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 742, malware hits 0, cleaned hits 0, time 83s May 08 2025 04:16:13 server maldet(8354): {scan} scan report saved, to view run: maldet --report 250508-0414.8354 May 09 2025 03:42:51 server maldet(9325): {update} checking for available updates... May 09 2025 03:42:52 server maldet(9325): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 09 2025 03:42:52 server maldet(9325): {update} hashing install files and checking against server... May 09 2025 03:42:52 server maldet(9325): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 09 2025 03:42:52 server maldet(9325): {update} latest version already installed. May 09 2025 03:42:52 server maldet(9441): {sigup} performing signature update check... May 09 2025 03:42:52 server maldet(9441): {sigup} local signature set is version 202505071163993 May 09 2025 03:42:53 server maldet(9441): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 09 2025 03:42:53 server maldet(9441): {sigup} latest signature set already installed May 09 2025 03:42:53 server maldet(9533): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 09 2025 03:42:54 server maldet(9533): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 09 2025 03:42:54 server maldet(9533): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 09 2025 03:42:54 server maldet(9533): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 09 2025 03:42:54 server maldet(9533): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 09 2025 03:43:14 server maldet(9533): {scan} file list completed in 20s, found 1211 files... May 09 2025 03:43:14 server maldet(9533): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 09 2025 03:43:14 server maldet(9533): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1211 files) in progress... May 09 2025 03:43:53 server maldet(9533): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1211, malware hits 0, cleaned hits 0, time 60s May 09 2025 03:43:53 server maldet(9533): {scan} scan report saved, to view run: maldet --report 250509-0342.9533 May 10 2025 03:59:57 server maldet(24700): {update} checking for available updates... May 10 2025 03:59:58 server maldet(24700): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 10 2025 03:59:58 server maldet(24700): {update} hashing install files and checking against server... May 10 2025 03:59:58 server maldet(24700): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 10 2025 03:59:58 server maldet(24700): {update} latest version already installed. May 10 2025 03:59:58 server maldet(24829): {sigup} performing signature update check... May 10 2025 03:59:58 server maldet(24829): {sigup} local signature set is version 202505071163993 May 10 2025 03:59:58 server maldet(24829): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 10 2025 03:59:58 server maldet(24829): {sigup} new signature set 202505102039127 available May 10 2025 03:59:58 server maldet(24829): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 10 2025 03:59:59 server maldet(24829): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 10 2025 03:59:59 server maldet(24829): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 10 2025 03:59:59 server maldet(24829): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 10 2025 03:59:59 server maldet(24829): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 10 2025 04:00:00 server maldet(24829): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 10 2025 04:00:00 server maldet(24829): {sigup} verified md5sum of maldet-sigpack.tgz May 10 2025 04:00:00 server maldet(24829): {sigup} unpacked and installed maldet-sigpack.tgz May 10 2025 04:00:00 server maldet(24829): {sigup} verified md5sum of maldet-clean.tgz May 10 2025 04:00:00 server maldet(24829): {sigup} unpacked and installed maldet-clean.tgz May 10 2025 04:00:00 server maldet(24829): {sigup} signature set update completed May 10 2025 04:00:00 server maldet(24829): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 10 2025 04:00:01 server maldet(25059): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 10 2025 04:00:03 server maldet(25059): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 10 2025 04:00:03 server maldet(25059): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 10 2025 04:00:03 server maldet(25059): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 10 2025 04:00:03 server maldet(25059): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 10 2025 04:00:18 server maldet(25059): {scan} file list completed in 14s, found 5649 files... May 10 2025 04:00:18 server maldet(25059): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 10 2025 04:00:18 server maldet(25059): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (5649 files) in progress... May 10 2025 04:02:20 server maldet(25059): {hit} malware hit {HEX}php.base64.inject.182 found for /home/dpsdgp/public_html/wp-includes/delpaths.php May 10 2025 04:02:20 server maldet(25059): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 5649, malware hits 1, cleaned hits 0, time 139s May 10 2025 04:02:20 server maldet(25059): {scan} scan report saved, to view run: maldet --report 250510-0400.25059 May 10 2025 04:02:20 server maldet(25059): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 250510-0400.25059 May 10 2025 04:02:20 server maldet(25059): {alert} sent scan report to kkumarclassic123@gmail.com May 11 2025 03:48:27 server maldet(26360): {update} checking for available updates... May 11 2025 03:48:27 server maldet(26360): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 11 2025 03:48:27 server maldet(26360): {update} hashing install files and checking against server... May 11 2025 03:48:28 server maldet(26360): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 11 2025 03:48:28 server maldet(26360): {update} latest version already installed. May 11 2025 03:48:28 server maldet(26495): {sigup} performing signature update check... May 11 2025 03:48:28 server maldet(26495): {sigup} local signature set is version 202505102039127 May 11 2025 03:48:28 server maldet(26495): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 11 2025 03:48:28 server maldet(26495): {sigup} latest signature set already installed May 11 2025 03:48:28 server maldet(26583): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 11 2025 03:48:29 server maldet(26583): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 11 2025 03:48:29 server maldet(26583): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 11 2025 03:48:29 server maldet(26583): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 11 2025 03:48:29 server maldet(26583): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 11 2025 03:48:40 server maldet(26583): {scan} file list completed in 11s, found 468 files... May 11 2025 03:48:40 server maldet(26583): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 11 2025 03:48:40 server maldet(26583): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (468 files) in progress... May 11 2025 03:49:03 server maldet(26583): {hit} malware hit {HEX}php.base64.inject.182 found for /home/dpsdgp/public_html/wp-login-css.php May 11 2025 03:49:03 server maldet(26583): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 468, malware hits 1, cleaned hits 0, time 34s May 11 2025 03:49:03 server maldet(26583): {scan} scan report saved, to view run: maldet --report 250511-0348.26583 May 11 2025 03:49:03 server maldet(26583): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 250511-0348.26583 May 11 2025 03:49:03 server maldet(26583): {alert} sent scan report to kkumarclassic123@gmail.com May 12 2025 04:07:01 server maldet(29113): {update} checking for available updates... May 12 2025 04:07:02 server maldet(29113): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 12 2025 04:07:02 server maldet(29113): {update} hashing install files and checking against server... May 12 2025 04:07:02 server maldet(29113): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 12 2025 04:07:02 server maldet(29113): {update} latest version already installed. May 12 2025 04:07:03 server maldet(29419): {sigup} performing signature update check... May 12 2025 04:07:03 server maldet(29419): {sigup} local signature set is version 202505102039127 May 12 2025 04:07:03 server maldet(29419): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 12 2025 04:07:03 server maldet(29419): {sigup} latest signature set already installed May 12 2025 04:07:04 server maldet(29726): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 12 2025 04:07:05 server maldet(29726): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 12 2025 04:07:05 server maldet(29726): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 12 2025 04:07:05 server maldet(29726): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 12 2025 04:07:05 server maldet(29726): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 12 2025 04:07:20 server maldet(29726): {scan} file list completed in 14s, found 610 files... May 12 2025 04:07:20 server maldet(29726): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 12 2025 04:07:20 server maldet(29726): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (610 files) in progress... May 12 2025 04:07:51 server maldet(29726): {hit} malware hit {YARA}multiple_php_webshells found for /home/dilseshaadi/public_html/wp-content/mu-plugins/695733/index.php May 12 2025 04:07:51 server maldet(29726): {hit} malware hit {HEX}php.shell.black-id.719 found for /home/dilseshaadi/public_html/wp-content/uploads/2025/01/952443/index.php May 12 2025 04:07:51 server maldet(29726): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 610, malware hits 2, cleaned hits 0, time 47s May 12 2025 04:07:51 server maldet(29726): {scan} scan report saved, to view run: maldet --report 250512-0407.29726 May 12 2025 04:07:51 server maldet(29726): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 250512-0407.29726 May 12 2025 04:07:51 server maldet(29726): {alert} sent scan report to kkumarclassic123@gmail.com May 13 2025 04:08:26 server maldet(25662): {update} checking for available updates... May 13 2025 04:08:27 server maldet(25662): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 13 2025 04:08:27 server maldet(25662): {update} hashing install files and checking against server... May 13 2025 04:08:27 server maldet(25662): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 13 2025 04:08:27 server maldet(25662): {update} latest version already installed. May 13 2025 04:08:27 server maldet(25788): {sigup} performing signature update check... May 13 2025 04:08:27 server maldet(25788): {sigup} local signature set is version 202505102039127 May 13 2025 04:08:28 server maldet(25788): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 13 2025 04:08:28 server maldet(25788): {sigup} new signature set 202505133012176 available May 13 2025 04:08:28 server maldet(25788): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 13 2025 04:08:28 server maldet(25788): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 13 2025 04:08:28 server maldet(25788): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 13 2025 04:08:28 server maldet(25788): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 13 2025 04:08:29 server maldet(25788): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 13 2025 04:08:29 server maldet(25788): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 13 2025 04:08:29 server maldet(25788): {sigup} verified md5sum of maldet-sigpack.tgz May 13 2025 04:08:29 server maldet(25788): {sigup} unpacked and installed maldet-sigpack.tgz May 13 2025 04:08:29 server maldet(25788): {sigup} verified md5sum of maldet-clean.tgz May 13 2025 04:08:29 server maldet(25788): {sigup} unpacked and installed maldet-clean.tgz May 13 2025 04:08:29 server maldet(25788): {sigup} signature set update completed May 13 2025 04:08:29 server maldet(25788): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 13 2025 04:08:30 server maldet(26032): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 13 2025 04:08:31 server maldet(26032): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 13 2025 04:08:31 server maldet(26032): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 13 2025 04:08:31 server maldet(26032): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 13 2025 04:08:31 server maldet(26032): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 13 2025 04:08:43 server maldet(26032): {scan} file list completed in 12s, found 584 files... May 13 2025 04:08:43 server maldet(26032): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 13 2025 04:08:43 server maldet(26032): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (584 files) in progress... May 13 2025 04:09:38 server maldet(26032): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 584, malware hits 0, cleaned hits 0, time 68s May 13 2025 04:09:38 server maldet(26032): {scan} scan report saved, to view run: maldet --report 250513-0408.26032 May 14 2025 04:20:52 server maldet(21450): {update} checking for available updates... May 14 2025 04:20:52 server maldet(21450): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 14 2025 04:20:52 server maldet(21450): {update} hashing install files and checking against server... May 14 2025 04:20:53 server maldet(21450): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 14 2025 04:20:53 server maldet(21450): {update} latest version already installed. May 14 2025 04:20:53 server maldet(21567): {sigup} performing signature update check... May 14 2025 04:20:53 server maldet(21567): {sigup} local signature set is version 202505133012176 May 14 2025 04:20:53 server maldet(21567): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 14 2025 04:20:53 server maldet(21567): {sigup} latest signature set already installed May 14 2025 04:20:54 server maldet(21667): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 14 2025 04:20:55 server maldet(21667): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 14 2025 04:20:55 server maldet(21667): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 14 2025 04:20:55 server maldet(21667): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 14 2025 04:20:55 server maldet(21667): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 14 2025 04:21:05 server maldet(21667): {scan} file list completed in 10s, found 3641 files... May 14 2025 04:21:05 server maldet(21667): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 14 2025 04:21:05 server maldet(21667): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3641 files) in progress... May 14 2025 04:22:12 server maldet(21667): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3641, malware hits 0, cleaned hits 0, time 78s May 14 2025 04:22:12 server maldet(21667): {scan} scan report saved, to view run: maldet --report 250514-0420.21667 May 15 2025 03:32:52 server maldet(29525): {update} checking for available updates... May 15 2025 03:32:52 server maldet(29525): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 15 2025 03:32:52 server maldet(29525): {update} hashing install files and checking against server... May 15 2025 03:32:53 server maldet(29525): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 15 2025 03:32:53 server maldet(29525): {update} latest version already installed. May 15 2025 03:32:53 server maldet(29651): {sigup} performing signature update check... May 15 2025 03:32:53 server maldet(29651): {sigup} local signature set is version 202505133012176 May 15 2025 03:32:53 server maldet(29651): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 15 2025 03:32:53 server maldet(29651): {sigup} latest signature set already installed May 15 2025 03:32:54 server maldet(29771): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 15 2025 03:32:55 server maldet(29771): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 15 2025 03:32:55 server maldet(29771): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 15 2025 03:32:55 server maldet(29771): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 15 2025 03:32:55 server maldet(29771): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 15 2025 03:33:06 server maldet(29771): {scan} file list completed in 11s, found 542 files... May 15 2025 03:33:07 server maldet(29771): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 15 2025 03:33:07 server maldet(29771): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (542 files) in progress... May 15 2025 03:33:36 server maldet(29771): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 542, malware hits 0, cleaned hits 0, time 42s May 15 2025 03:33:36 server maldet(29771): {scan} scan report saved, to view run: maldet --report 250515-0332.29771 May 16 2025 03:47:16 server maldet(23485): {update} checking for available updates... May 16 2025 03:47:17 server maldet(23485): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 16 2025 03:47:17 server maldet(23485): {update} hashing install files and checking against server... May 16 2025 03:47:17 server maldet(23485): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 16 2025 03:47:17 server maldet(23485): {update} latest version already installed. May 16 2025 03:47:17 server maldet(23595): {sigup} performing signature update check... May 16 2025 03:47:17 server maldet(23595): {sigup} local signature set is version 202505133012176 May 16 2025 03:47:18 server maldet(23595): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 16 2025 03:47:18 server maldet(23595): {sigup} new signature set 202505163985107 available May 16 2025 03:47:18 server maldet(23595): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 16 2025 03:47:18 server maldet(23595): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 16 2025 03:47:19 server maldet(23595): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 16 2025 03:47:19 server maldet(23595): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 16 2025 03:47:19 server maldet(23595): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 16 2025 03:47:19 server maldet(23595): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 16 2025 03:47:19 server maldet(23595): {sigup} verified md5sum of maldet-sigpack.tgz May 16 2025 03:47:19 server maldet(23595): {sigup} unpacked and installed maldet-sigpack.tgz May 16 2025 03:47:20 server maldet(23595): {sigup} verified md5sum of maldet-clean.tgz May 16 2025 03:47:20 server maldet(23595): {sigup} unpacked and installed maldet-clean.tgz May 16 2025 03:47:20 server maldet(23595): {sigup} signature set update completed May 16 2025 03:47:20 server maldet(23595): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 16 2025 03:47:20 server maldet(23802): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 16 2025 03:47:20 server maldet(23802): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 16 2025 03:47:20 server maldet(23802): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 16 2025 03:47:20 server maldet(23802): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 16 2025 03:47:20 server maldet(23802): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 16 2025 03:47:38 server maldet(23802): {scan} file list completed in 18s, found 372 files... May 16 2025 03:47:38 server maldet(23802): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 16 2025 03:47:38 server maldet(23802): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (372 files) in progress... May 16 2025 03:47:54 server maldet(23802): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 372, malware hits 0, cleaned hits 0, time 34s May 16 2025 03:47:54 server maldet(23802): {scan} scan report saved, to view run: maldet --report 250516-0347.23802 May 17 2025 03:49:09 server maldet(11217): {update} checking for available updates... May 17 2025 03:49:10 server maldet(11217): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 17 2025 03:49:10 server maldet(11217): {update} hashing install files and checking against server... May 17 2025 03:49:10 server maldet(11217): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 17 2025 03:49:10 server maldet(11217): {update} latest version already installed. May 17 2025 03:49:10 server maldet(11331): {sigup} performing signature update check... May 17 2025 03:49:10 server maldet(11331): {sigup} local signature set is version 202505163985107 May 17 2025 03:49:11 server maldet(11331): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 17 2025 03:49:11 server maldet(11331): {sigup} latest signature set already installed May 17 2025 03:49:11 server maldet(11419): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 17 2025 03:49:12 server maldet(11419): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 17 2025 03:49:12 server maldet(11419): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 17 2025 03:49:12 server maldet(11419): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 17 2025 03:49:12 server maldet(11419): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 17 2025 03:49:26 server maldet(11419): {scan} file list completed in 14s, found 1757 files... May 17 2025 03:49:26 server maldet(11419): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 17 2025 03:49:26 server maldet(11419): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1757 files) in progress... May 17 2025 03:51:55 server maldet(11419): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1757, malware hits 0, cleaned hits 0, time 163s May 17 2025 03:51:55 server maldet(11419): {scan} scan report saved, to view run: maldet --report 250517-0349.11419 May 18 2025 04:36:07 server maldet(2503): {update} checking for available updates... May 18 2025 04:36:08 server maldet(2503): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 18 2025 04:36:08 server maldet(2503): {update} hashing install files and checking against server... May 18 2025 04:36:08 server maldet(2503): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 18 2025 04:36:08 server maldet(2503): {update} latest version already installed. May 18 2025 04:36:09 server maldet(2612): {sigup} performing signature update check... May 18 2025 04:36:09 server maldet(2612): {sigup} local signature set is version 202505163985107 May 18 2025 04:36:09 server maldet(2612): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 18 2025 04:36:09 server maldet(2612): {sigup} latest signature set already installed May 18 2025 04:36:09 server maldet(2700): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 18 2025 04:36:10 server maldet(2700): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 18 2025 04:36:10 server maldet(2700): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 18 2025 04:36:10 server maldet(2700): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 18 2025 04:36:10 server maldet(2700): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 18 2025 04:36:23 server maldet(2700): {scan} file list completed in 13s, found 393 files... May 18 2025 04:36:23 server maldet(2700): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 18 2025 04:36:23 server maldet(2700): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (393 files) in progress... May 18 2025 04:36:54 server maldet(2700): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 393, malware hits 0, cleaned hits 0, time 45s May 18 2025 04:36:54 server maldet(2700): {scan} scan report saved, to view run: maldet --report 250518-0436.2700 May 19 2025 04:16:50 server maldet(7287): {update} checking for available updates... May 19 2025 04:16:51 server maldet(7287): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 19 2025 04:16:51 server maldet(7287): {update} hashing install files and checking against server... May 19 2025 04:16:51 server maldet(7287): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 19 2025 04:16:51 server maldet(7287): {update} latest version already installed. May 19 2025 04:16:51 server maldet(7398): {sigup} performing signature update check... May 19 2025 04:16:51 server maldet(7398): {sigup} local signature set is version 202505163985107 May 19 2025 04:16:52 server maldet(7398): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 19 2025 04:16:52 server maldet(7398): {sigup} new signature set 20250519762470 available May 19 2025 04:16:52 server maldet(7398): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 19 2025 04:16:53 server maldet(7398): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 19 2025 04:16:53 server maldet(7398): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 19 2025 04:16:53 server maldet(7398): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 19 2025 04:16:53 server maldet(7398): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 19 2025 04:16:54 server maldet(7398): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 19 2025 04:16:54 server maldet(7398): {sigup} verified md5sum of maldet-sigpack.tgz May 19 2025 04:16:54 server maldet(7398): {sigup} unpacked and installed maldet-sigpack.tgz May 19 2025 04:16:54 server maldet(7398): {sigup} verified md5sum of maldet-clean.tgz May 19 2025 04:16:54 server maldet(7398): {sigup} unpacked and installed maldet-clean.tgz May 19 2025 04:16:54 server maldet(7398): {sigup} signature set update completed May 19 2025 04:16:54 server maldet(7398): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 19 2025 04:16:54 server maldet(7606): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 19 2025 04:16:55 server maldet(7606): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 19 2025 04:16:55 server maldet(7606): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 19 2025 04:16:55 server maldet(7606): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 19 2025 04:16:55 server maldet(7606): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 19 2025 04:17:16 server maldet(7606): {scan} file list completed in 21s, found 421 files... May 19 2025 04:17:17 server maldet(7606): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 19 2025 04:17:17 server maldet(7606): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (421 files) in progress... May 19 2025 04:17:46 server maldet(7606): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 421, malware hits 0, cleaned hits 0, time 52s May 19 2025 04:17:46 server maldet(7606): {scan} scan report saved, to view run: maldet --report 250519-0416.7606 May 20 2025 04:29:23 server maldet(28123): {update} checking for available updates... May 20 2025 04:29:23 server maldet(28123): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 20 2025 04:29:23 server maldet(28123): {update} hashing install files and checking against server... May 20 2025 04:29:24 server maldet(28123): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 20 2025 04:29:24 server maldet(28123): {update} latest version already installed. May 20 2025 04:29:24 server maldet(28232): {sigup} performing signature update check... May 20 2025 04:29:24 server maldet(28232): {sigup} local signature set is version 20250519762470 May 20 2025 04:29:24 server maldet(28232): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 20 2025 04:29:24 server maldet(28232): {sigup} latest signature set already installed May 20 2025 04:29:24 server maldet(28320): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 20 2025 04:29:25 server maldet(28320): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 20 2025 04:29:25 server maldet(28320): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 20 2025 04:29:25 server maldet(28320): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 20 2025 04:29:25 server maldet(28320): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 20 2025 04:29:31 server maldet(28320): {scan} file list completed in 6s, found 4289 files... May 20 2025 04:29:31 server maldet(28320): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 20 2025 04:29:31 server maldet(28320): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4289 files) in progress... May 20 2025 04:30:54 server maldet(28320): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4289, malware hits 0, cleaned hits 0, time 90s May 20 2025 04:30:54 server maldet(28320): {scan} scan report saved, to view run: maldet --report 250520-0429.28320 May 21 2025 04:22:08 server maldet(11751): {update} checking for available updates... May 21 2025 04:22:09 server maldet(11751): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 21 2025 04:22:09 server maldet(11751): {update} hashing install files and checking against server... May 21 2025 04:22:09 server maldet(11751): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 21 2025 04:22:09 server maldet(11751): {update} latest version already installed. May 21 2025 04:22:09 server maldet(11864): {sigup} performing signature update check... May 21 2025 04:22:09 server maldet(11864): {sigup} local signature set is version 20250519762470 May 21 2025 04:22:10 server maldet(11864): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 21 2025 04:22:10 server maldet(11864): {sigup} latest signature set already installed May 21 2025 04:22:10 server maldet(11952): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 21 2025 04:22:10 server maldet(11952): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 21 2025 04:22:10 server maldet(11952): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 21 2025 04:22:10 server maldet(11952): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 21 2025 04:22:10 server maldet(11952): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 21 2025 04:22:18 server maldet(11952): {scan} file list completed in 8s, found 178 files... May 21 2025 04:22:18 server maldet(11952): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 21 2025 04:22:18 server maldet(11952): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (178 files) in progress... May 21 2025 04:22:27 server maldet(11952): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 178, malware hits 0, cleaned hits 0, time 17s May 21 2025 04:22:27 server maldet(11952): {scan} scan report saved, to view run: maldet --report 250521-0422.11952 May 22 2025 04:22:46 server maldet(26025): {update} checking for available updates... May 22 2025 04:22:46 server maldet(26025): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 22 2025 04:22:46 server maldet(26025): {update} hashing install files and checking against server... May 22 2025 04:22:47 server maldet(26025): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 22 2025 04:22:47 server maldet(26025): {update} latest version already installed. May 22 2025 04:22:48 server maldet(26137): {sigup} performing signature update check... May 22 2025 04:22:48 server maldet(26137): {sigup} local signature set is version 20250519762470 May 22 2025 04:22:48 server maldet(26137): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 22 2025 04:22:48 server maldet(26137): {sigup} new signature set 202505221736773 available May 22 2025 04:22:48 server maldet(26137): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 22 2025 04:22:49 server maldet(26137): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 22 2025 04:22:49 server maldet(26137): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 22 2025 04:22:49 server maldet(26137): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 22 2025 04:22:50 server maldet(26137): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 22 2025 04:22:50 server maldet(26137): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 22 2025 04:22:50 server maldet(26137): {sigup} verified md5sum of maldet-sigpack.tgz May 22 2025 04:22:50 server maldet(26137): {sigup} unpacked and installed maldet-sigpack.tgz May 22 2025 04:22:50 server maldet(26137): {sigup} verified md5sum of maldet-clean.tgz May 22 2025 04:22:50 server maldet(26137): {sigup} unpacked and installed maldet-clean.tgz May 22 2025 04:22:50 server maldet(26137): {sigup} signature set update completed May 22 2025 04:22:50 server maldet(26137): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 22 2025 04:22:50 server maldet(26349): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 22 2025 04:22:51 server maldet(26349): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 22 2025 04:22:51 server maldet(26349): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 22 2025 04:22:51 server maldet(26349): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 22 2025 04:22:51 server maldet(26349): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 22 2025 04:23:10 server maldet(26349): {scan} file list completed in 19s, found 1247 files... May 22 2025 04:23:10 server maldet(26349): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 22 2025 04:23:10 server maldet(26349): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1247 files) in progress... May 22 2025 04:24:39 server maldet(26349): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1247, malware hits 0, cleaned hits 0, time 109s May 22 2025 04:24:39 server maldet(26349): {scan} scan report saved, to view run: maldet --report 250522-0422.26349 May 23 2025 04:25:39 server maldet(29978): {update} checking for available updates... May 23 2025 04:25:40 server maldet(29978): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 23 2025 04:25:40 server maldet(29978): {update} hashing install files and checking against server... May 23 2025 04:25:40 server maldet(29978): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 23 2025 04:25:41 server maldet(29978): {update} latest version already installed. May 23 2025 04:25:41 server maldet(30098): {sigup} performing signature update check... May 23 2025 04:25:41 server maldet(30098): {sigup} local signature set is version 202505221736773 May 23 2025 04:25:41 server maldet(30098): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 23 2025 04:25:41 server maldet(30098): {sigup} latest signature set already installed May 23 2025 04:25:41 server maldet(30186): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 23 2025 04:25:42 server maldet(30186): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 23 2025 04:25:42 server maldet(30186): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 23 2025 04:25:42 server maldet(30186): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 23 2025 04:25:42 server maldet(30186): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 23 2025 04:25:50 server maldet(30186): {scan} file list completed in 7s, found 558 files... May 23 2025 04:25:50 server maldet(30186): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 23 2025 04:25:50 server maldet(30186): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (558 files) in progress... May 23 2025 04:26:26 server maldet(30186): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 558, malware hits 0, cleaned hits 0, time 44s May 23 2025 04:26:26 server maldet(30186): {scan} scan report saved, to view run: maldet --report 250523-0425.30186 May 24 2025 04:11:41 server maldet(4681): {update} checking for available updates... May 24 2025 04:11:41 server maldet(4681): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 24 2025 04:11:41 server maldet(4681): {update} hashing install files and checking against server... May 24 2025 04:11:42 server maldet(4681): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 24 2025 04:11:42 server maldet(4681): {update} latest version already installed. May 24 2025 04:11:42 server maldet(4794): {sigup} performing signature update check... May 24 2025 04:11:42 server maldet(4794): {sigup} local signature set is version 202505221736773 May 24 2025 04:11:42 server maldet(4794): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 24 2025 04:11:42 server maldet(4794): {sigup} latest signature set already installed May 24 2025 04:11:43 server maldet(4899): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 24 2025 04:11:43 server maldet(4899): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 24 2025 04:11:43 server maldet(4899): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 24 2025 04:11:43 server maldet(4899): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 24 2025 04:11:43 server maldet(4899): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 24 2025 04:11:49 server maldet(4899): {scan} file list completed in 6s, found 833 files... May 24 2025 04:11:49 server maldet(4899): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 24 2025 04:11:49 server maldet(4899): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (833 files) in progress... May 24 2025 04:12:32 server maldet(4899): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 833, malware hits 0, cleaned hits 0, time 49s May 24 2025 04:12:32 server maldet(4899): {scan} scan report saved, to view run: maldet --report 250524-0411.4899 May 25 2025 04:42:44 server maldet(16249): {update} checking for available updates... May 25 2025 04:42:45 server maldet(16249): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 25 2025 04:42:45 server maldet(16249): {update} hashing install files and checking against server... May 25 2025 04:42:45 server maldet(16249): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 25 2025 04:42:45 server maldet(16249): {update} latest version already installed. May 25 2025 04:42:46 server maldet(16358): {sigup} performing signature update check... May 25 2025 04:42:46 server maldet(16358): {sigup} local signature set is version 202505221736773 May 25 2025 04:42:46 server maldet(16358): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 25 2025 04:42:46 server maldet(16358): {sigup} new signature set 202505252708832 available May 25 2025 04:42:46 server maldet(16358): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 25 2025 04:42:47 server maldet(16358): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 25 2025 04:42:47 server maldet(16358): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 25 2025 04:42:47 server maldet(16358): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 25 2025 04:42:48 server maldet(16358): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 25 2025 04:42:48 server maldet(16358): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 25 2025 04:42:48 server maldet(16358): {sigup} verified md5sum of maldet-sigpack.tgz May 25 2025 04:42:48 server maldet(16358): {sigup} unpacked and installed maldet-sigpack.tgz May 25 2025 04:42:48 server maldet(16358): {sigup} verified md5sum of maldet-clean.tgz May 25 2025 04:42:48 server maldet(16358): {sigup} unpacked and installed maldet-clean.tgz May 25 2025 04:42:48 server maldet(16358): {sigup} signature set update completed May 25 2025 04:42:49 server maldet(16358): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 25 2025 04:42:49 server maldet(16566): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 25 2025 04:42:50 server maldet(16566): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 25 2025 04:42:50 server maldet(16566): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 25 2025 04:42:50 server maldet(16566): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 25 2025 04:42:50 server maldet(16566): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 25 2025 04:43:18 server maldet(16566): {scan} file list completed in 28s, found 250 files... May 25 2025 04:43:18 server maldet(16566): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 25 2025 04:43:18 server maldet(16566): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (250 files) in progress... May 25 2025 04:43:42 server maldet(16566): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 250, malware hits 0, cleaned hits 0, time 53s May 25 2025 04:43:42 server maldet(16566): {scan} scan report saved, to view run: maldet --report 250525-0442.16566 May 26 2025 03:57:14 server maldet(16005): {update} checking for available updates... May 26 2025 03:57:15 server maldet(16005): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 26 2025 03:57:15 server maldet(16005): {update} hashing install files and checking against server... May 26 2025 03:57:15 server maldet(16005): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 26 2025 03:57:15 server maldet(16005): {update} latest version already installed. May 26 2025 03:57:15 server maldet(16118): {sigup} performing signature update check... May 26 2025 03:57:15 server maldet(16118): {sigup} local signature set is version 202505252708832 May 26 2025 03:57:15 server maldet(16118): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 26 2025 03:57:15 server maldet(16118): {sigup} latest signature set already installed May 26 2025 03:57:16 server maldet(16206): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 26 2025 03:57:16 server maldet(16206): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 26 2025 03:57:16 server maldet(16206): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 26 2025 03:57:16 server maldet(16206): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 26 2025 03:57:16 server maldet(16206): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 26 2025 03:57:25 server maldet(16206): {scan} file list completed in 9s, found 2999 files... May 26 2025 03:57:25 server maldet(16206): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 26 2025 03:57:25 server maldet(16206): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2999 files) in progress... May 26 2025 03:59:21 server maldet(16206): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2999, malware hits 0, cleaned hits 0, time 125s May 26 2025 03:59:21 server maldet(16206): {scan} scan report saved, to view run: maldet --report 250526-0357.16206 May 27 2025 04:42:15 server maldet(30400): {update} checking for available updates... May 27 2025 04:42:15 server maldet(30400): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 27 2025 04:42:15 server maldet(30400): {update} hashing install files and checking against server... May 27 2025 04:42:16 server maldet(30400): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 27 2025 04:42:16 server maldet(30400): {update} latest version already installed. May 27 2025 04:42:16 server maldet(30547): {sigup} performing signature update check... May 27 2025 04:42:16 server maldet(30547): {sigup} local signature set is version 202505252708832 May 27 2025 04:42:16 server maldet(30547): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 27 2025 04:42:16 server maldet(30547): {sigup} latest signature set already installed May 27 2025 04:42:17 server maldet(30656): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 27 2025 04:42:17 server maldet(30656): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 27 2025 04:42:17 server maldet(30656): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 27 2025 04:42:17 server maldet(30656): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 27 2025 04:42:18 server maldet(30656): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 27 2025 04:42:35 server maldet(30656): {scan} file list completed in 18s, found 311 files... May 27 2025 04:42:35 server maldet(30656): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 27 2025 04:42:35 server maldet(30656): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (311 files) in progress... May 27 2025 04:42:59 server maldet(30656): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 311, malware hits 0, cleaned hits 0, time 42s May 27 2025 04:42:59 server maldet(30656): {scan} scan report saved, to view run: maldet --report 250527-0442.30656 May 28 2025 04:06:34 server maldet(27785): {update} checking for available updates... May 28 2025 04:06:35 server maldet(27785): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 28 2025 04:06:35 server maldet(27785): {update} hashing install files and checking against server... May 28 2025 04:06:35 server maldet(27785): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 28 2025 04:06:35 server maldet(27785): {update} latest version already installed. May 28 2025 04:06:36 server maldet(27936): {sigup} performing signature update check... May 28 2025 04:06:36 server maldet(27936): {sigup} local signature set is version 202505252708832 May 28 2025 04:06:36 server maldet(27936): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 28 2025 04:06:36 server maldet(27936): {sigup} new signature set 202505283679777 available May 28 2025 04:06:36 server maldet(27936): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 28 2025 04:06:37 server maldet(27936): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 28 2025 04:06:37 server maldet(27936): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 28 2025 04:06:37 server maldet(27936): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 28 2025 04:06:37 server maldet(27936): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 28 2025 04:06:38 server maldet(27936): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 28 2025 04:06:38 server maldet(27936): {sigup} verified md5sum of maldet-sigpack.tgz May 28 2025 04:06:38 server maldet(27936): {sigup} unpacked and installed maldet-sigpack.tgz May 28 2025 04:06:38 server maldet(27936): {sigup} verified md5sum of maldet-clean.tgz May 28 2025 04:06:38 server maldet(27936): {sigup} unpacked and installed maldet-clean.tgz May 28 2025 04:06:38 server maldet(27936): {sigup} signature set update completed May 28 2025 04:06:38 server maldet(27936): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 28 2025 04:06:39 server maldet(28144): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 28 2025 04:06:39 server maldet(28144): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 28 2025 04:06:39 server maldet(28144): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 28 2025 04:06:39 server maldet(28144): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 28 2025 04:06:39 server maldet(28144): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 28 2025 04:06:48 server maldet(28144): {scan} file list completed in 9s, found 2098 files... May 28 2025 04:06:48 server maldet(28144): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 28 2025 04:06:48 server maldet(28144): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2098 files) in progress... May 28 2025 04:08:05 server maldet(28144): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2098, malware hits 0, cleaned hits 0, time 86s May 28 2025 04:08:05 server maldet(28144): {scan} scan report saved, to view run: maldet --report 250528-0406.28144 May 29 2025 03:51:21 server maldet(16685): {update} checking for available updates... May 29 2025 03:51:22 server maldet(16685): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 29 2025 03:51:22 server maldet(16685): {update} hashing install files and checking against server... May 29 2025 03:51:22 server maldet(16685): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 29 2025 03:51:22 server maldet(16685): {update} latest version already installed. May 29 2025 03:51:22 server maldet(16805): {sigup} performing signature update check... May 29 2025 03:51:22 server maldet(16805): {sigup} local signature set is version 202505283679777 May 29 2025 03:51:23 server maldet(16805): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 29 2025 03:51:23 server maldet(16805): {sigup} latest signature set already installed May 29 2025 03:51:23 server maldet(16893): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 29 2025 03:51:23 server maldet(16893): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 29 2025 03:51:23 server maldet(16893): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 29 2025 03:51:23 server maldet(16893): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 29 2025 03:51:23 server maldet(16893): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 29 2025 03:51:29 server maldet(16893): {scan} file list completed in 6s, found 4110 files... May 29 2025 03:51:29 server maldet(16893): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 29 2025 03:51:29 server maldet(16893): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4110 files) in progress... May 29 2025 03:52:47 server maldet(16893): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4110, malware hits 0, cleaned hits 0, time 84s May 29 2025 03:52:47 server maldet(16893): {scan} scan report saved, to view run: maldet --report 250529-0351.16893 May 30 2025 03:43:03 server maldet(26286): {update} checking for available updates... May 30 2025 03:43:04 server maldet(26286): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 30 2025 03:43:04 server maldet(26286): {update} hashing install files and checking against server... May 30 2025 03:43:04 server maldet(26286): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 30 2025 03:43:04 server maldet(26286): {update} latest version already installed. May 30 2025 03:43:04 server maldet(26395): {sigup} performing signature update check... May 30 2025 03:43:04 server maldet(26395): {sigup} local signature set is version 202505283679777 May 30 2025 03:43:05 server maldet(26395): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 30 2025 03:43:05 server maldet(26395): {sigup} latest signature set already installed May 30 2025 03:43:05 server maldet(26483): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 30 2025 03:43:05 server maldet(26483): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 30 2025 03:43:05 server maldet(26483): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 30 2025 03:43:05 server maldet(26483): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 30 2025 03:43:05 server maldet(26483): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 30 2025 03:43:13 server maldet(26483): {scan} file list completed in 8s, found 536 files... May 30 2025 03:43:13 server maldet(26483): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 30 2025 03:43:13 server maldet(26483): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (536 files) in progress... May 30 2025 03:43:44 server maldet(26483): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 536, malware hits 0, cleaned hits 0, time 39s May 30 2025 03:43:44 server maldet(26483): {scan} scan report saved, to view run: maldet --report 250530-0343.26483 May 31 2025 04:21:36 server maldet(32202): {update} checking for available updates... May 31 2025 04:21:37 server maldet(32202): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver May 31 2025 04:21:37 server maldet(32202): {update} hashing install files and checking against server... May 31 2025 04:21:39 server maldet(32202): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash May 31 2025 04:21:39 server maldet(32202): {update} latest version already installed. May 31 2025 04:21:39 server maldet(32313): {sigup} performing signature update check... May 31 2025 04:21:39 server maldet(32313): {sigup} local signature set is version 202505283679777 May 31 2025 04:21:39 server maldet(32313): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver May 31 2025 04:21:39 server maldet(32313): {sigup} new signature set 20250531456902 available May 31 2025 04:21:39 server maldet(32313): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 31 2025 04:21:40 server maldet(32313): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz May 31 2025 04:21:40 server maldet(32313): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 May 31 2025 04:21:40 server maldet(32313): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 31 2025 04:21:41 server maldet(32313): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz May 31 2025 04:21:41 server maldet(32313): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 May 31 2025 04:21:41 server maldet(32313): {sigup} verified md5sum of maldet-sigpack.tgz May 31 2025 04:21:41 server maldet(32313): {sigup} unpacked and installed maldet-sigpack.tgz May 31 2025 04:21:41 server maldet(32313): {sigup} verified md5sum of maldet-clean.tgz May 31 2025 04:21:41 server maldet(32313): {sigup} unpacked and installed maldet-clean.tgz May 31 2025 04:21:41 server maldet(32313): {sigup} signature set update completed May 31 2025 04:21:41 server maldet(32313): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 31 2025 04:21:41 server maldet(32519): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress May 31 2025 04:21:43 server maldet(32519): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) May 31 2025 04:21:43 server maldet(32519): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... May 31 2025 04:21:43 server maldet(32519): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 May 31 2025 04:21:43 server maldet(32519): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 May 31 2025 04:21:46 server maldet(32519): {scan} file list completed in 3s, found 480 files... May 31 2025 04:21:46 server maldet(32519): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... May 31 2025 04:21:46 server maldet(32519): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (480 files) in progress... May 31 2025 04:22:21 server maldet(32519): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 480, malware hits 0, cleaned hits 0, time 40s May 31 2025 04:22:21 server maldet(32519): {scan} scan report saved, to view run: maldet --report 250531-0421.32519 Jun 01 2025 04:21:56 server maldet(32653): {update} checking for available updates... Jun 01 2025 04:21:57 server maldet(32653): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 01 2025 04:21:57 server maldet(32653): {update} hashing install files and checking against server... Jun 01 2025 04:21:57 server maldet(32653): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 01 2025 04:21:57 server maldet(32653): {update} latest version already installed. Jun 01 2025 04:21:57 server maldet(32765): {sigup} performing signature update check... Jun 01 2025 04:21:57 server maldet(32765): {sigup} local signature set is version 20250531456902 Jun 01 2025 04:21:58 server maldet(32765): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 01 2025 04:21:58 server maldet(32765): {sigup} new signature set 202506011196154 available Jun 01 2025 04:21:58 server maldet(32765): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 01 2025 04:21:58 server maldet(32765): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 01 2025 04:21:59 server maldet(32765): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 01 2025 04:21:59 server maldet(32765): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 01 2025 04:21:59 server maldet(32765): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 01 2025 04:21:59 server maldet(32765): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 01 2025 04:21:59 server maldet(32765): {sigup} verified md5sum of maldet-sigpack.tgz Jun 01 2025 04:21:59 server maldet(32765): {sigup} unpacked and installed maldet-sigpack.tgz Jun 01 2025 04:21:59 server maldet(32765): {sigup} verified md5sum of maldet-clean.tgz Jun 01 2025 04:21:59 server maldet(32765): {sigup} unpacked and installed maldet-clean.tgz Jun 01 2025 04:21:59 server maldet(32765): {sigup} signature set update completed Jun 01 2025 04:21:59 server maldet(32765): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 01 2025 04:21:59 server maldet(510): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 01 2025 04:22:00 server maldet(510): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 01 2025 04:22:00 server maldet(510): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 01 2025 04:22:00 server maldet(510): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 01 2025 04:22:00 server maldet(510): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 01 2025 04:22:06 server maldet(510): {scan} file list completed in 6s, found 477 files... Jun 01 2025 04:22:06 server maldet(510): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 01 2025 04:22:06 server maldet(510): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (477 files) in progress... Jun 01 2025 04:22:32 server maldet(510): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 477, malware hits 0, cleaned hits 0, time 33s Jun 01 2025 04:22:32 server maldet(510): {scan} scan report saved, to view run: maldet --report 250601-0421.510 Jun 02 2025 04:41:49 server maldet(16027): {update} checking for available updates... Jun 02 2025 04:41:49 server maldet(16027): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 02 2025 04:41:49 server maldet(16027): {update} hashing install files and checking against server... Jun 02 2025 04:41:50 server maldet(16027): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 02 2025 04:41:50 server maldet(16027): {update} latest version already installed. Jun 02 2025 04:41:50 server maldet(16136): {sigup} performing signature update check... Jun 02 2025 04:41:50 server maldet(16136): {sigup} local signature set is version 202506011196154 Jun 02 2025 04:41:50 server maldet(16136): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 02 2025 04:41:50 server maldet(16136): {sigup} latest signature set already installed Jun 02 2025 04:41:50 server maldet(16224): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 02 2025 04:41:51 server maldet(16224): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 02 2025 04:41:51 server maldet(16224): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 02 2025 04:41:51 server maldet(16224): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 02 2025 04:41:51 server maldet(16224): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 02 2025 04:42:00 server maldet(16224): {scan} file list completed in 9s, found 489 files... Jun 02 2025 04:42:00 server maldet(16224): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 02 2025 04:42:00 server maldet(16224): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (489 files) in progress... Jun 02 2025 04:42:32 server maldet(16224): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 489, malware hits 0, cleaned hits 0, time 42s Jun 02 2025 04:42:32 server maldet(16224): {scan} scan report saved, to view run: maldet --report 250602-0441.16224 Jun 03 2025 03:41:02 server maldet(27016): {update} checking for available updates... Jun 03 2025 03:41:02 server maldet(27016): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 03 2025 03:41:02 server maldet(27016): {update} hashing install files and checking against server... Jun 03 2025 03:41:02 server maldet(27016): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 03 2025 03:41:02 server maldet(27016): {update} latest version already installed. Jun 03 2025 03:41:03 server maldet(27125): {sigup} performing signature update check... Jun 03 2025 03:41:03 server maldet(27125): {sigup} local signature set is version 202506011196154 Jun 03 2025 03:41:03 server maldet(27125): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 03 2025 03:41:03 server maldet(27125): {sigup} latest signature set already installed Jun 03 2025 03:41:03 server maldet(27213): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 03 2025 03:41:03 server maldet(27213): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 03 2025 03:41:03 server maldet(27213): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 03 2025 03:41:03 server maldet(27213): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 03 2025 03:41:03 server maldet(27213): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 03 2025 03:41:11 server maldet(27213): {scan} file list completed in 8s, found 1114 files... Jun 03 2025 03:41:11 server maldet(27213): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 03 2025 03:41:11 server maldet(27213): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1114 files) in progress... Jun 03 2025 03:41:38 server maldet(27213): {hit} malware hit {HEX}php.malware.magento.606 found for /home/dpsdgp/public_html/ab.php Jun 03 2025 03:41:38 server maldet(27213): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1114, malware hits 1, cleaned hits 0, time 35s Jun 03 2025 03:41:38 server maldet(27213): {scan} scan report saved, to view run: maldet --report 250603-0341.27213 Jun 03 2025 03:41:38 server maldet(27213): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 250603-0341.27213 Jun 03 2025 03:41:38 server maldet(27213): {alert} sent scan report to kkumarclassic123@gmail.com Jun 04 2025 04:41:31 server maldet(6622): {update} checking for available updates... Jun 04 2025 04:41:32 server maldet(6622): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 04 2025 04:41:32 server maldet(6622): {update} hashing install files and checking against server... Jun 04 2025 04:41:32 server maldet(6622): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 04 2025 04:41:32 server maldet(6622): {update} latest version already installed. Jun 04 2025 04:41:32 server maldet(6734): {sigup} performing signature update check... Jun 04 2025 04:41:32 server maldet(6734): {sigup} local signature set is version 202506011196154 Jun 04 2025 04:41:33 server maldet(6734): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 04 2025 04:41:33 server maldet(6734): {sigup} new signature set 202506042164456 available Jun 04 2025 04:41:33 server maldet(6734): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 04 2025 04:41:34 server maldet(6734): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 04 2025 04:41:34 server maldet(6734): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 04 2025 04:41:34 server maldet(6734): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 04 2025 04:41:34 server maldet(6734): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 04 2025 04:41:35 server maldet(6734): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 04 2025 04:41:35 server maldet(6734): {sigup} verified md5sum of maldet-sigpack.tgz Jun 04 2025 04:41:35 server maldet(6734): {sigup} unpacked and installed maldet-sigpack.tgz Jun 04 2025 04:41:35 server maldet(6734): {sigup} verified md5sum of maldet-clean.tgz Jun 04 2025 04:41:35 server maldet(6734): {sigup} unpacked and installed maldet-clean.tgz Jun 04 2025 04:41:35 server maldet(6734): {sigup} signature set update completed Jun 04 2025 04:41:35 server maldet(6734): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 04 2025 04:41:35 server maldet(6942): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 04 2025 04:41:35 server maldet(6942): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 04 2025 04:41:35 server maldet(6942): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 04 2025 04:41:35 server maldet(6942): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 04 2025 04:41:35 server maldet(6942): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 04 2025 04:41:42 server maldet(6942): {scan} file list completed in 7s, found 1280 files... Jun 04 2025 04:41:42 server maldet(6942): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 04 2025 04:41:42 server maldet(6942): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1280 files) in progress... Jun 04 2025 04:42:26 server maldet(6942): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1280, malware hits 0, cleaned hits 0, time 50s Jun 04 2025 04:42:26 server maldet(6942): {scan} scan report saved, to view run: maldet --report 250604-0441.6942 Jun 05 2025 03:56:44 server maldet(10191): {update} checking for available updates... Jun 05 2025 03:56:44 server maldet(10191): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 05 2025 03:56:44 server maldet(10191): {update} hashing install files and checking against server... Jun 05 2025 03:56:45 server maldet(10191): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 05 2025 03:56:45 server maldet(10191): {update} latest version already installed. Jun 05 2025 03:56:45 server maldet(10309): {sigup} performing signature update check... Jun 05 2025 03:56:45 server maldet(10309): {sigup} local signature set is version 202506042164456 Jun 05 2025 03:56:45 server maldet(10309): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 05 2025 03:56:45 server maldet(10309): {sigup} latest signature set already installed Jun 05 2025 03:56:45 server maldet(10397): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 05 2025 03:56:46 server maldet(10397): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 05 2025 03:56:46 server maldet(10397): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 05 2025 03:56:46 server maldet(10397): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 05 2025 03:56:46 server maldet(10397): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 05 2025 03:56:52 server maldet(10397): {scan} file list completed in 6s, found 7097 files... Jun 05 2025 03:56:52 server maldet(10397): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 05 2025 03:56:52 server maldet(10397): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (7097 files) in progress... Jun 05 2025 03:58:23 server maldet(10397): {hit} malware hit {HEX}php.exe.globals.416 found for /home/dpsdgp/public_html/wp-includes/eislqg.php Jun 05 2025 03:58:23 server maldet(10397): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 7097, malware hits 1, cleaned hits 0, time 98s Jun 05 2025 03:58:23 server maldet(10397): {scan} scan report saved, to view run: maldet --report 250605-0356.10397 Jun 05 2025 03:58:23 server maldet(10397): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 250605-0356.10397 Jun 05 2025 03:58:23 server maldet(10397): {alert} sent scan report to kkumarclassic123@gmail.com Jun 06 2025 03:53:26 server maldet(15945): {update} checking for available updates... Jun 06 2025 03:53:27 server maldet(15945): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 06 2025 03:53:27 server maldet(15945): {update} hashing install files and checking against server... Jun 06 2025 03:53:28 server maldet(15945): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 06 2025 03:53:28 server maldet(15945): {update} latest version already installed. Jun 06 2025 03:53:28 server maldet(16080): {sigup} performing signature update check... Jun 06 2025 03:53:28 server maldet(16080): {sigup} local signature set is version 202506042164456 Jun 06 2025 03:53:28 server maldet(16080): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 06 2025 03:53:28 server maldet(16080): {sigup} latest signature set already installed Jun 06 2025 03:53:28 server maldet(16168): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 06 2025 03:53:29 server maldet(16168): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 06 2025 03:53:29 server maldet(16168): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 06 2025 03:53:29 server maldet(16168): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 06 2025 03:53:29 server maldet(16168): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 06 2025 03:53:45 server maldet(16168): {scan} file list completed in 16s, found 1441 files... Jun 06 2025 03:53:45 server maldet(16168): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 06 2025 03:53:46 server maldet(16168): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1441 files) in progress... Jun 06 2025 03:54:38 server maldet(16168): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1441, malware hits 0, cleaned hits 0, time 70s Jun 06 2025 03:54:38 server maldet(16168): {scan} scan report saved, to view run: maldet --report 250606-0353.16168 Jun 07 2025 03:18:21 server maldet(24847): {update} checking for available updates... Jun 07 2025 03:18:22 server maldet(24847): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 07 2025 03:18:22 server maldet(24847): {update} hashing install files and checking against server... Jun 07 2025 03:18:22 server maldet(24847): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 07 2025 03:18:22 server maldet(24847): {update} latest version already installed. Jun 07 2025 03:18:22 server maldet(24956): {sigup} performing signature update check... Jun 07 2025 03:18:22 server maldet(24956): {sigup} local signature set is version 202506042164456 Jun 07 2025 03:18:22 server maldet(24956): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 07 2025 03:18:23 server maldet(24956): {sigup} new signature set 20250607589111 available Jun 07 2025 03:18:23 server maldet(24956): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 07 2025 03:18:23 server maldet(24956): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 07 2025 03:18:23 server maldet(24956): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 07 2025 03:18:23 server maldet(24956): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 07 2025 03:18:24 server maldet(24956): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 07 2025 03:18:24 server maldet(24956): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 07 2025 03:18:24 server maldet(24956): {sigup} verified md5sum of maldet-sigpack.tgz Jun 07 2025 03:18:24 server maldet(24956): {sigup} unpacked and installed maldet-sigpack.tgz Jun 07 2025 03:18:24 server maldet(24956): {sigup} verified md5sum of maldet-clean.tgz Jun 07 2025 03:18:24 server maldet(24956): {sigup} unpacked and installed maldet-clean.tgz Jun 07 2025 03:18:24 server maldet(24956): {sigup} signature set update completed Jun 07 2025 03:18:25 server maldet(24956): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 07 2025 03:18:25 server maldet(25164): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 07 2025 03:18:25 server maldet(25164): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 07 2025 03:18:25 server maldet(25164): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 07 2025 03:18:25 server maldet(25164): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 07 2025 03:18:25 server maldet(25164): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 07 2025 03:18:33 server maldet(25164): {scan} file list completed in 8s, found 1665 files... Jun 07 2025 03:18:34 server maldet(25164): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 07 2025 03:18:34 server maldet(25164): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1665 files) in progress... Jun 07 2025 03:19:51 server maldet(25164): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1665, malware hits 0, cleaned hits 0, time 86s Jun 07 2025 03:19:51 server maldet(25164): {scan} scan report saved, to view run: maldet --report 250607-0318.25164 Jun 08 2025 04:23:05 server maldet(17115): {update} checking for available updates... Jun 08 2025 04:23:06 server maldet(17115): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 08 2025 04:23:06 server maldet(17115): {update} hashing install files and checking against server... Jun 08 2025 04:23:06 server maldet(17115): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 08 2025 04:23:06 server maldet(17115): {update} latest version already installed. Jun 08 2025 04:23:06 server maldet(17224): {sigup} performing signature update check... Jun 08 2025 04:23:06 server maldet(17224): {sigup} local signature set is version 20250607589111 Jun 08 2025 04:23:07 server maldet(17224): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 08 2025 04:23:07 server maldet(17224): {sigup} latest signature set already installed Jun 08 2025 04:23:07 server maldet(17323): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 08 2025 04:23:07 server maldet(17323): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 08 2025 04:23:07 server maldet(17323): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 08 2025 04:23:07 server maldet(17323): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 08 2025 04:23:07 server maldet(17323): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 08 2025 04:23:13 server maldet(17323): {scan} file list completed in 6s, found 879 files... Jun 08 2025 04:23:13 server maldet(17323): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 08 2025 04:23:13 server maldet(17323): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (879 files) in progress... Jun 08 2025 04:24:01 server maldet(17323): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 879, malware hits 0, cleaned hits 0, time 54s Jun 08 2025 04:24:01 server maldet(17323): {scan} scan report saved, to view run: maldet --report 250608-0423.17323 Jun 09 2025 03:49:07 server maldet(4354): {update} checking for available updates... Jun 09 2025 03:49:07 server maldet(4354): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 09 2025 03:49:07 server maldet(4354): {update} hashing install files and checking against server... Jun 09 2025 03:49:07 server maldet(4354): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 09 2025 03:49:07 server maldet(4354): {update} latest version already installed. Jun 09 2025 03:49:08 server maldet(4466): {sigup} performing signature update check... Jun 09 2025 03:49:08 server maldet(4466): {sigup} local signature set is version 20250607589111 Jun 09 2025 03:49:08 server maldet(4466): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 09 2025 03:49:08 server maldet(4466): {sigup} latest signature set already installed Jun 09 2025 03:49:08 server maldet(4558): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 09 2025 03:49:08 server maldet(4558): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 09 2025 03:49:08 server maldet(4558): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 09 2025 03:49:08 server maldet(4558): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 09 2025 03:49:08 server maldet(4558): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 09 2025 03:49:16 server maldet(4558): {scan} file list completed in 8s, found 431 files... Jun 09 2025 03:49:16 server maldet(4558): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 09 2025 03:49:16 server maldet(4558): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (431 files) in progress... Jun 09 2025 03:50:23 server maldet(4558): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 431, malware hits 0, cleaned hits 0, time 74s Jun 09 2025 03:50:23 server maldet(4558): {scan} scan report saved, to view run: maldet --report 250609-0349.4558 Jun 10 2025 03:49:57 server maldet(30017): {update} checking for available updates... Jun 10 2025 03:49:57 server maldet(30017): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 10 2025 03:49:57 server maldet(30017): {update} hashing install files and checking against server... Jun 10 2025 03:49:57 server maldet(30017): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 10 2025 03:49:57 server maldet(30017): {update} latest version already installed. Jun 10 2025 03:49:57 server maldet(30126): {sigup} performing signature update check... Jun 10 2025 03:49:57 server maldet(30126): {sigup} local signature set is version 20250607589111 Jun 10 2025 03:49:58 server maldet(30126): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 10 2025 03:49:58 server maldet(30126): {sigup} latest signature set already installed Jun 10 2025 03:49:58 server maldet(30214): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 10 2025 03:49:58 server maldet(30214): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 10 2025 03:49:58 server maldet(30214): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 10 2025 03:49:58 server maldet(30214): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 10 2025 03:49:58 server maldet(30214): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 10 2025 03:50:10 server maldet(30214): {scan} file list completed in 12s, found 376 files... Jun 10 2025 03:50:10 server maldet(30214): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 10 2025 03:50:10 server maldet(30214): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (376 files) in progress... Jun 10 2025 03:50:40 server maldet(30214): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 376, malware hits 0, cleaned hits 0, time 42s Jun 10 2025 03:50:40 server maldet(30214): {scan} scan report saved, to view run: maldet --report 250610-0349.30214 Jun 11 2025 04:06:08 server maldet(21568): {update} checking for available updates... Jun 11 2025 04:06:08 server maldet(21568): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 11 2025 04:06:08 server maldet(21568): {update} hashing install files and checking against server... Jun 11 2025 04:06:09 server maldet(21568): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 11 2025 04:06:09 server maldet(21568): {update} latest version already installed. Jun 11 2025 04:06:09 server maldet(21677): {sigup} performing signature update check... Jun 11 2025 04:06:09 server maldet(21677): {sigup} local signature set is version 20250607589111 Jun 11 2025 04:06:09 server maldet(21677): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 11 2025 04:06:09 server maldet(21677): {sigup} new signature set 20250610484586 available Jun 11 2025 04:06:09 server maldet(21677): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 11 2025 04:06:09 server maldet(21677): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 11 2025 04:06:10 server maldet(21677): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 11 2025 04:06:10 server maldet(21677): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 11 2025 04:06:10 server maldet(21677): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 11 2025 04:06:10 server maldet(21677): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 11 2025 04:06:10 server maldet(21677): {sigup} verified md5sum of maldet-sigpack.tgz Jun 11 2025 04:06:10 server maldet(21677): {sigup} unpacked and installed maldet-sigpack.tgz Jun 11 2025 04:06:10 server maldet(21677): {sigup} verified md5sum of maldet-clean.tgz Jun 11 2025 04:06:10 server maldet(21677): {sigup} unpacked and installed maldet-clean.tgz Jun 11 2025 04:06:10 server maldet(21677): {sigup} signature set update completed Jun 11 2025 04:06:10 server maldet(21677): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 11 2025 04:06:11 server maldet(21890): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 11 2025 04:06:11 server maldet(21890): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 11 2025 04:06:11 server maldet(21890): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 11 2025 04:06:11 server maldet(21890): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 11 2025 04:06:11 server maldet(21890): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 11 2025 04:06:39 server maldet(21890): {scan} file list completed in 28s, found 1951 files... Jun 11 2025 04:06:39 server maldet(21890): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 11 2025 04:06:39 server maldet(21890): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1951 files) in progress... Jun 11 2025 04:08:01 server maldet(21890): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1951, malware hits 0, cleaned hits 0, time 110s Jun 11 2025 04:08:01 server maldet(21890): {scan} scan report saved, to view run: maldet --report 250611-0406.21890 Jun 12 2025 03:53:25 server maldet(15834): {update} checking for available updates... Jun 12 2025 03:53:25 server maldet(15834): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 12 2025 03:53:25 server maldet(15834): {update} hashing install files and checking against server... Jun 12 2025 03:53:26 server maldet(15834): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 12 2025 03:53:26 server maldet(15834): {update} latest version already installed. Jun 12 2025 03:53:26 server maldet(15948): {sigup} performing signature update check... Jun 12 2025 03:53:26 server maldet(15948): {sigup} local signature set is version 20250610484586 Jun 12 2025 03:53:26 server maldet(15948): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 12 2025 03:53:26 server maldet(15948): {sigup} latest signature set already installed Jun 12 2025 03:53:26 server maldet(16049): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 12 2025 03:53:26 server maldet(16049): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 12 2025 03:53:26 server maldet(16049): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 12 2025 03:53:26 server maldet(16049): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 12 2025 03:53:26 server maldet(16049): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 12 2025 03:53:33 server maldet(16049): {scan} file list completed in 7s, found 4136 files... Jun 12 2025 03:53:33 server maldet(16049): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 12 2025 03:53:33 server maldet(16049): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4136 files) in progress... Jun 12 2025 03:56:10 server maldet(16049): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4136, malware hits 0, cleaned hits 0, time 164s Jun 12 2025 03:56:10 server maldet(16049): {scan} scan report saved, to view run: maldet --report 250612-0353.16049 Jun 13 2025 04:37:02 server maldet(14876): {update} checking for available updates... Jun 13 2025 04:37:05 server maldet(14876): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 13 2025 04:37:06 server maldet(14876): {update} hashing install files and checking against server... Jun 13 2025 04:37:09 server maldet(14876): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 13 2025 04:37:09 server maldet(14876): {update} latest version already installed. Jun 13 2025 04:37:11 server maldet(15033): {sigup} performing signature update check... Jun 13 2025 04:37:11 server maldet(15033): {sigup} local signature set is version 20250610484586 Jun 13 2025 04:37:14 server maldet(15033): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 13 2025 04:37:14 server maldet(15033): {sigup} new signature set 20250613705251 available Jun 13 2025 04:37:15 server maldet(15033): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 13 2025 04:37:20 server maldet(15033): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 13 2025 04:37:24 server maldet(15033): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 13 2025 04:37:24 server maldet(15033): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 13 2025 04:37:27 server maldet(15033): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 13 2025 04:37:32 server maldet(15033): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 13 2025 04:37:32 server maldet(15033): {sigup} verified md5sum of maldet-sigpack.tgz Jun 13 2025 04:37:35 server maldet(15033): {sigup} unpacked and installed maldet-sigpack.tgz Jun 13 2025 04:37:36 server maldet(15033): {sigup} verified md5sum of maldet-clean.tgz Jun 13 2025 04:37:37 server maldet(15033): {sigup} unpacked and installed maldet-clean.tgz Jun 13 2025 04:37:37 server maldet(15033): {sigup} signature set update completed Jun 13 2025 04:37:38 server maldet(15033): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 13 2025 04:37:41 server maldet(15367): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 13 2025 04:37:46 server maldet(15367): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 13 2025 04:37:47 server maldet(15367): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 13 2025 04:37:47 server maldet(15367): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 13 2025 04:37:47 server maldet(15367): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 13 2025 04:47:40 server maldet(15367): {scan} file list completed in 592s, found 582 files... Jun 13 2025 04:47:40 server maldet(15367): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 13 2025 04:47:41 server maldet(15367): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (582 files) in progress... Jun 13 2025 04:50:20 server maldet(15367): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 582, malware hits 0, cleaned hits 0, time 759s Jun 13 2025 04:50:20 server maldet(15367): {scan} scan report saved, to view run: maldet --report 250613-0437.15367 Jun 14 2025 04:47:50 server maldet(16825): {update} checking for available updates... Jun 14 2025 04:47:50 server maldet(16825): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 14 2025 04:47:50 server maldet(16825): {update} hashing install files and checking against server... Jun 14 2025 04:47:51 server maldet(16825): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 14 2025 04:47:51 server maldet(16825): {update} latest version already installed. Jun 14 2025 04:47:51 server maldet(16934): {sigup} performing signature update check... Jun 14 2025 04:47:51 server maldet(16934): {sigup} local signature set is version 20250613705251 Jun 14 2025 04:47:51 server maldet(16934): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 14 2025 04:47:51 server maldet(16934): {sigup} latest signature set already installed Jun 14 2025 04:47:51 server maldet(17022): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 14 2025 04:47:51 server maldet(17022): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 14 2025 04:47:51 server maldet(17022): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 14 2025 04:47:51 server maldet(17022): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 14 2025 04:47:51 server maldet(17022): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 14 2025 04:47:58 server maldet(17022): {scan} file list completed in 7s, found 446 files... Jun 14 2025 04:47:58 server maldet(17022): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 14 2025 04:47:58 server maldet(17022): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (446 files) in progress... Jun 14 2025 04:48:28 server maldet(17022): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 446, malware hits 0, cleaned hits 0, time 37s Jun 14 2025 04:48:28 server maldet(17022): {scan} scan report saved, to view run: maldet --report 250614-0447.17022 Jun 15 2025 04:08:03 server maldet(30291): {update} checking for available updates... Jun 15 2025 04:08:04 server maldet(30291): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 15 2025 04:08:04 server maldet(30291): {update} hashing install files and checking against server... Jun 15 2025 04:08:04 server maldet(30291): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 15 2025 04:08:05 server maldet(30291): {update} latest version already installed. Jun 15 2025 04:08:05 server maldet(30405): {sigup} performing signature update check... Jun 15 2025 04:08:05 server maldet(30405): {sigup} local signature set is version 20250613705251 Jun 15 2025 04:08:05 server maldet(30405): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 15 2025 04:08:05 server maldet(30405): {sigup} latest signature set already installed Jun 15 2025 04:08:05 server maldet(30493): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 15 2025 04:08:05 server maldet(30493): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 15 2025 04:08:05 server maldet(30493): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 15 2025 04:08:05 server maldet(30493): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 15 2025 04:08:05 server maldet(30493): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 15 2025 04:08:12 server maldet(30493): {scan} file list completed in 7s, found 364 files... Jun 15 2025 04:08:12 server maldet(30493): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 15 2025 04:08:12 server maldet(30493): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (364 files) in progress... Jun 15 2025 04:08:52 server maldet(30493): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 364, malware hits 0, cleaned hits 0, time 47s Jun 15 2025 04:08:52 server maldet(30493): {scan} scan report saved, to view run: maldet --report 250615-0408.30493 Jun 16 2025 04:22:28 server maldet(18209): {update} checking for available updates... Jun 16 2025 04:22:29 server maldet(18209): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 16 2025 04:22:29 server maldet(18209): {update} hashing install files and checking against server... Jun 16 2025 04:22:29 server maldet(18209): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 16 2025 04:22:29 server maldet(18209): {update} latest version already installed. Jun 16 2025 04:22:29 server maldet(18318): {sigup} performing signature update check... Jun 16 2025 04:22:29 server maldet(18318): {sigup} local signature set is version 20250613705251 Jun 16 2025 04:22:30 server maldet(18318): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 16 2025 04:22:30 server maldet(18318): {sigup} new signature set 20250616812462 available Jun 16 2025 04:22:30 server maldet(18318): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 16 2025 04:22:30 server maldet(18318): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 16 2025 04:22:31 server maldet(18318): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 16 2025 04:22:31 server maldet(18318): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 16 2025 04:22:31 server maldet(18318): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 16 2025 04:22:31 server maldet(18318): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 16 2025 04:22:31 server maldet(18318): {sigup} verified md5sum of maldet-sigpack.tgz Jun 16 2025 04:22:31 server maldet(18318): {sigup} unpacked and installed maldet-sigpack.tgz Jun 16 2025 04:22:31 server maldet(18318): {sigup} verified md5sum of maldet-clean.tgz Jun 16 2025 04:22:32 server maldet(18318): {sigup} unpacked and installed maldet-clean.tgz Jun 16 2025 04:22:32 server maldet(18318): {sigup} signature set update completed Jun 16 2025 04:22:32 server maldet(18318): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 16 2025 04:22:32 server maldet(18526): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 16 2025 04:22:32 server maldet(18526): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 16 2025 04:22:32 server maldet(18526): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 16 2025 04:22:32 server maldet(18526): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 16 2025 04:22:32 server maldet(18526): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 16 2025 04:22:44 server maldet(18526): {scan} file list completed in 12s, found 437 files... Jun 16 2025 04:22:45 server maldet(18526): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 16 2025 04:22:45 server maldet(18526): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (437 files) in progress... Jun 16 2025 04:24:02 server maldet(18526): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 437, malware hits 0, cleaned hits 0, time 90s Jun 16 2025 04:24:02 server maldet(18526): {scan} scan report saved, to view run: maldet --report 250616-0422.18526 Jun 17 2025 03:30:14 server maldet(15172): {update} checking for available updates... Jun 17 2025 03:30:15 server maldet(15172): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 17 2025 03:30:15 server maldet(15172): {update} hashing install files and checking against server... Jun 17 2025 03:30:15 server maldet(15172): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 17 2025 03:30:15 server maldet(15172): {update} latest version already installed. Jun 17 2025 03:30:15 server maldet(15282): {sigup} performing signature update check... Jun 17 2025 03:30:15 server maldet(15282): {sigup} local signature set is version 20250616812462 Jun 17 2025 03:30:15 server maldet(15282): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 17 2025 03:30:16 server maldet(15282): {sigup} latest signature set already installed Jun 17 2025 03:30:16 server maldet(15370): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 17 2025 03:30:17 server maldet(15370): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 17 2025 03:30:17 server maldet(15370): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 17 2025 03:30:17 server maldet(15370): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 17 2025 03:30:17 server maldet(15370): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 17 2025 03:30:26 server maldet(15370): {scan} file list completed in 9s, found 518 files... Jun 17 2025 03:30:26 server maldet(15370): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 17 2025 03:30:26 server maldet(15370): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (518 files) in progress... Jun 17 2025 03:31:09 server maldet(15370): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 518, malware hits 0, cleaned hits 0, time 53s Jun 17 2025 03:31:09 server maldet(15370): {scan} scan report saved, to view run: maldet --report 250617-0330.15370 Jun 18 2025 04:21:57 server maldet(18788): {update} checking for available updates... Jun 18 2025 04:21:58 server maldet(18788): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 18 2025 04:21:58 server maldet(18788): {update} hashing install files and checking against server... Jun 18 2025 04:21:58 server maldet(18788): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 18 2025 04:21:58 server maldet(18788): {update} latest version already installed. Jun 18 2025 04:21:58 server maldet(18900): {sigup} performing signature update check... Jun 18 2025 04:21:58 server maldet(18900): {sigup} local signature set is version 20250616812462 Jun 18 2025 04:21:58 server maldet(18900): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 18 2025 04:21:58 server maldet(18900): {sigup} latest signature set already installed Jun 18 2025 04:21:58 server maldet(18988): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 18 2025 04:21:59 server maldet(18988): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 18 2025 04:21:59 server maldet(18988): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 18 2025 04:21:59 server maldet(18988): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 18 2025 04:21:59 server maldet(18988): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 18 2025 04:22:14 server maldet(18988): {scan} file list completed in 15s, found 655 files... Jun 18 2025 04:22:14 server maldet(18988): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 18 2025 04:22:14 server maldet(18988): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (655 files) in progress... Jun 18 2025 04:23:09 server maldet(18988): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 655, malware hits 0, cleaned hits 0, time 71s Jun 18 2025 04:23:09 server maldet(18988): {scan} scan report saved, to view run: maldet --report 250618-0421.18988 Jun 19 2025 03:48:57 server maldet(4715): {update} checking for available updates... Jun 19 2025 03:48:58 server maldet(4715): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 19 2025 03:48:58 server maldet(4715): {update} hashing install files and checking against server... Jun 19 2025 03:48:58 server maldet(4715): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 19 2025 03:48:58 server maldet(4715): {update} latest version already installed. Jun 19 2025 03:48:58 server maldet(4827): {sigup} performing signature update check... Jun 19 2025 03:48:58 server maldet(4827): {sigup} local signature set is version 20250616812462 Jun 19 2025 03:48:59 server maldet(4827): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 19 2025 03:48:59 server maldet(4827): {sigup} new signature set 202506191777955 available Jun 19 2025 03:48:59 server maldet(4827): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 19 2025 03:48:59 server maldet(4827): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 19 2025 03:49:00 server maldet(4827): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 19 2025 03:49:00 server maldet(4827): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 19 2025 03:49:00 server maldet(4827): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 19 2025 03:49:00 server maldet(4827): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 19 2025 03:49:00 server maldet(4827): {sigup} verified md5sum of maldet-sigpack.tgz Jun 19 2025 03:49:00 server maldet(4827): {sigup} unpacked and installed maldet-sigpack.tgz Jun 19 2025 03:49:01 server maldet(4827): {sigup} verified md5sum of maldet-clean.tgz Jun 19 2025 03:49:01 server maldet(4827): {sigup} unpacked and installed maldet-clean.tgz Jun 19 2025 03:49:01 server maldet(4827): {sigup} signature set update completed Jun 19 2025 03:49:01 server maldet(4827): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 19 2025 03:49:01 server maldet(5036): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 19 2025 03:49:01 server maldet(5036): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 19 2025 03:49:01 server maldet(5036): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 19 2025 03:49:01 server maldet(5036): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 19 2025 03:49:01 server maldet(5036): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 19 2025 03:49:14 server maldet(5036): {scan} file list completed in 13s, found 1899 files... Jun 19 2025 03:49:14 server maldet(5036): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 19 2025 03:49:14 server maldet(5036): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1899 files) in progress... Jun 19 2025 03:50:47 server maldet(5036): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1899, malware hits 0, cleaned hits 0, time 106s Jun 19 2025 03:50:47 server maldet(5036): {scan} scan report saved, to view run: maldet --report 250619-0349.5036 Jun 20 2025 03:39:58 server maldet(10539): {update} checking for available updates... Jun 20 2025 03:39:58 server maldet(10539): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 20 2025 03:39:58 server maldet(10539): {update} hashing install files and checking against server... Jun 20 2025 03:39:58 server maldet(10539): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 20 2025 03:39:58 server maldet(10539): {update} latest version already installed. Jun 20 2025 03:39:59 server maldet(10681): {sigup} performing signature update check... Jun 20 2025 03:39:59 server maldet(10681): {sigup} local signature set is version 202506191777955 Jun 20 2025 03:39:59 server maldet(10681): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 20 2025 03:39:59 server maldet(10681): {sigup} latest signature set already installed Jun 20 2025 03:39:59 server maldet(10772): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 20 2025 03:39:59 server maldet(10772): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 20 2025 03:39:59 server maldet(10772): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 20 2025 03:39:59 server maldet(10772): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 20 2025 03:39:59 server maldet(10772): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 20 2025 03:40:08 server maldet(10772): {scan} file list completed in 9s, found 1982 files... Jun 20 2025 03:40:08 server maldet(10772): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 20 2025 03:40:08 server maldet(10772): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1982 files) in progress... Jun 20 2025 03:41:29 server maldet(10772): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1982, malware hits 0, cleaned hits 0, time 90s Jun 20 2025 03:41:29 server maldet(10772): {scan} scan report saved, to view run: maldet --report 250620-0339.10772 Jun 21 2025 03:50:33 server maldet(5854): {update} checking for available updates... Jun 21 2025 03:50:34 server maldet(5854): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 21 2025 03:50:34 server maldet(5854): {update} hashing install files and checking against server... Jun 21 2025 03:50:34 server maldet(5854): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 21 2025 03:50:34 server maldet(5854): {update} latest version already installed. Jun 21 2025 03:50:36 server maldet(5967): {sigup} performing signature update check... Jun 21 2025 03:50:36 server maldet(5967): {sigup} local signature set is version 202506191777955 Jun 21 2025 03:50:37 server maldet(5967): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 21 2025 03:50:37 server maldet(5967): {sigup} latest signature set already installed Jun 21 2025 03:50:37 server maldet(6056): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 21 2025 03:50:37 server maldet(6056): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 21 2025 03:50:37 server maldet(6056): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 21 2025 03:50:37 server maldet(6056): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 21 2025 03:50:37 server maldet(6056): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 21 2025 03:50:50 server maldet(6056): {scan} file list completed in 13s, found 455 files... Jun 21 2025 03:50:50 server maldet(6056): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 21 2025 03:50:50 server maldet(6056): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (455 files) in progress... Jun 21 2025 03:51:43 server maldet(6056): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 455, malware hits 0, cleaned hits 0, time 66s Jun 21 2025 03:51:44 server maldet(6056): {scan} scan report saved, to view run: maldet --report 250621-0350.6056 Jun 22 2025 03:42:00 server maldet(5784): {update} checking for available updates... Jun 22 2025 03:42:03 server maldet(5784): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 22 2025 03:42:03 server maldet(5784): {update} hashing install files and checking against server... Jun 22 2025 03:42:04 server maldet(5784): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 22 2025 03:42:04 server maldet(5784): {update} latest version already installed. Jun 22 2025 03:42:05 server maldet(5984): {sigup} performing signature update check... Jun 22 2025 03:42:05 server maldet(5984): {sigup} local signature set is version 202506191777955 Jun 22 2025 03:42:07 server maldet(5984): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 22 2025 03:42:07 server maldet(5984): {sigup} new signature set 202506222744524 available Jun 22 2025 03:42:07 server maldet(5984): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 22 2025 03:42:09 server maldet(5984): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 22 2025 03:42:09 server maldet(5984): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 22 2025 03:42:09 server maldet(5984): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 22 2025 03:42:11 server maldet(5984): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 22 2025 03:42:12 server maldet(5984): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 22 2025 03:42:12 server maldet(5984): {sigup} verified md5sum of maldet-sigpack.tgz Jun 22 2025 03:42:13 server maldet(5984): {sigup} unpacked and installed maldet-sigpack.tgz Jun 22 2025 03:42:13 server maldet(5984): {sigup} verified md5sum of maldet-clean.tgz Jun 22 2025 03:42:13 server maldet(5984): {sigup} unpacked and installed maldet-clean.tgz Jun 22 2025 03:42:13 server maldet(5984): {sigup} signature set update completed Jun 22 2025 03:42:14 server maldet(5984): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 22 2025 03:42:16 server maldet(6195): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 22 2025 03:42:21 server maldet(6195): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 22 2025 03:42:21 server maldet(6195): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 22 2025 03:42:21 server maldet(6195): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 22 2025 03:42:21 server maldet(6195): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 22 2025 03:46:20 server maldet(6195): {scan} file list completed in 239s, found 1696 files... Jun 22 2025 03:46:20 server maldet(6195): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 22 2025 03:46:20 server maldet(6195): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1696 files) in progress... Jun 22 2025 03:51:32 server maldet(6195): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1696, malware hits 0, cleaned hits 0, time 555s Jun 22 2025 03:51:32 server maldet(6195): {scan} scan report saved, to view run: maldet --report 250622-0342.6195 Jun 23 2025 03:45:09 server maldet(6363): {update} checking for available updates... Jun 23 2025 03:45:10 server maldet(6363): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 23 2025 03:45:10 server maldet(6363): {update} hashing install files and checking against server... Jun 23 2025 03:45:10 server maldet(6363): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 23 2025 03:45:10 server maldet(6363): {update} latest version already installed. Jun 23 2025 03:45:11 server maldet(6473): {sigup} performing signature update check... Jun 23 2025 03:45:11 server maldet(6473): {sigup} local signature set is version 202506222744524 Jun 23 2025 03:45:11 server maldet(6473): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 23 2025 03:45:11 server maldet(6473): {sigup} latest signature set already installed Jun 23 2025 03:45:11 server maldet(6566): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 23 2025 03:45:12 server maldet(6566): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 23 2025 03:45:12 server maldet(6566): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 23 2025 03:45:12 server maldet(6566): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 23 2025 03:45:12 server maldet(6566): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 23 2025 03:45:21 server maldet(6566): {scan} file list completed in 9s, found 423 files... Jun 23 2025 03:45:21 server maldet(6566): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 23 2025 03:45:21 server maldet(6566): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (423 files) in progress... Jun 23 2025 03:46:26 server maldet(6566): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 423, malware hits 0, cleaned hits 0, time 75s Jun 23 2025 03:46:26 server maldet(6566): {scan} scan report saved, to view run: maldet --report 250623-0345.6566 Jun 24 2025 04:10:29 server maldet(13075): {update} checking for available updates... Jun 24 2025 04:10:30 server maldet(13075): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 24 2025 04:10:30 server maldet(13075): {update} hashing install files and checking against server... Jun 24 2025 04:10:30 server maldet(13075): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 24 2025 04:10:30 server maldet(13075): {update} latest version already installed. Jun 24 2025 04:10:30 server maldet(13184): {sigup} performing signature update check... Jun 24 2025 04:10:30 server maldet(13184): {sigup} local signature set is version 202506222744524 Jun 24 2025 04:10:30 server maldet(13184): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 24 2025 04:10:30 server maldet(13184): {sigup} latest signature set already installed Jun 24 2025 04:10:30 server maldet(13275): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 24 2025 04:10:31 server maldet(13275): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 24 2025 04:10:31 server maldet(13275): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 24 2025 04:10:31 server maldet(13275): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 24 2025 04:10:31 server maldet(13275): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 24 2025 04:10:37 server maldet(13275): {scan} file list completed in 6s, found 471 files... Jun 24 2025 04:10:37 server maldet(13275): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 24 2025 04:10:37 server maldet(13275): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (471 files) in progress... Jun 24 2025 04:11:20 server maldet(13275): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 471, malware hits 0, cleaned hits 0, time 50s Jun 24 2025 04:11:20 server maldet(13275): {scan} scan report saved, to view run: maldet --report 250624-0410.13275 Jun 25 2025 03:58:41 server maldet(15361): {update} checking for available updates... Jun 25 2025 03:58:45 server maldet(15361): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 25 2025 03:58:45 server maldet(15361): {update} hashing install files and checking against server... Jun 25 2025 03:58:47 server maldet(15361): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 25 2025 03:58:47 server maldet(15361): {update} latest version already installed. Jun 25 2025 03:58:48 server maldet(15484): {sigup} performing signature update check... Jun 25 2025 03:58:48 server maldet(15484): {sigup} local signature set is version 202506222744524 Jun 25 2025 03:58:49 server maldet(15484): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 25 2025 03:58:49 server maldet(15484): {sigup} new signature set 202506253712170 available Jun 25 2025 03:58:50 server maldet(15484): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 25 2025 03:58:52 server maldet(15484): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jun 25 2025 03:58:55 server maldet(15484): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jun 25 2025 03:58:56 server maldet(15484): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 25 2025 03:58:56 server maldet(15484): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jun 25 2025 03:58:56 server maldet(15484): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jun 25 2025 03:58:56 server maldet(15484): {sigup} verified md5sum of maldet-sigpack.tgz Jun 25 2025 03:58:57 server maldet(15484): {sigup} unpacked and installed maldet-sigpack.tgz Jun 25 2025 03:58:57 server maldet(15484): {sigup} verified md5sum of maldet-clean.tgz Jun 25 2025 03:58:57 server maldet(15484): {sigup} unpacked and installed maldet-clean.tgz Jun 25 2025 03:58:57 server maldet(15484): {sigup} signature set update completed Jun 25 2025 03:58:57 server maldet(15484): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 25 2025 03:58:57 server maldet(15691): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 25 2025 03:58:58 server maldet(15691): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 25 2025 03:58:58 server maldet(15691): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 25 2025 03:58:58 server maldet(15691): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 25 2025 03:58:58 server maldet(15691): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 25 2025 03:59:09 server maldet(15691): {scan} file list completed in 11s, found 386 files... Jun 25 2025 03:59:09 server maldet(15691): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 25 2025 03:59:09 server maldet(15691): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (386 files) in progress... Jun 25 2025 03:59:43 server maldet(15691): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 386, malware hits 0, cleaned hits 0, time 46s Jun 25 2025 03:59:43 server maldet(15691): {scan} scan report saved, to view run: maldet --report 250625-0358.15691 Jun 26 2025 03:43:39 server maldet(10808): {update} checking for available updates... Jun 26 2025 03:43:40 server maldet(10808): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 26 2025 03:43:40 server maldet(10808): {update} hashing install files and checking against server... Jun 26 2025 03:43:40 server maldet(10808): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 26 2025 03:43:40 server maldet(10808): {update} latest version already installed. Jun 26 2025 03:43:40 server maldet(10917): {sigup} performing signature update check... Jun 26 2025 03:43:40 server maldet(10917): {sigup} local signature set is version 202506253712170 Jun 26 2025 03:43:41 server maldet(10917): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 26 2025 03:43:41 server maldet(10917): {sigup} latest signature set already installed Jun 26 2025 03:43:41 server maldet(11005): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 26 2025 03:43:41 server maldet(11005): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 26 2025 03:43:41 server maldet(11005): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 26 2025 03:43:41 server maldet(11005): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 26 2025 03:43:41 server maldet(11005): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 26 2025 03:43:49 server maldet(11005): {scan} file list completed in 8s, found 517 files... Jun 26 2025 03:43:49 server maldet(11005): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 26 2025 03:43:49 server maldet(11005): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (517 files) in progress... Jun 26 2025 03:44:32 server maldet(11005): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 517, malware hits 0, cleaned hits 0, time 51s Jun 26 2025 03:44:32 server maldet(11005): {scan} scan report saved, to view run: maldet --report 250626-0343.11005 Jun 27 2025 04:35:56 server maldet(28945): {update} checking for available updates... Jun 27 2025 04:35:57 server maldet(28945): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 27 2025 04:35:57 server maldet(28945): {update} hashing install files and checking against server... Jun 27 2025 04:35:57 server maldet(28945): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 27 2025 04:35:57 server maldet(28945): {update} latest version already installed. Jun 27 2025 04:35:57 server maldet(29056): {sigup} performing signature update check... Jun 27 2025 04:35:57 server maldet(29056): {sigup} local signature set is version 202506253712170 Jun 27 2025 04:35:58 server maldet(29056): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 27 2025 04:35:58 server maldet(29056): {sigup} latest signature set already installed Jun 27 2025 04:35:58 server maldet(29147): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 27 2025 04:35:59 server maldet(29147): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 27 2025 04:35:59 server maldet(29147): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 27 2025 04:35:59 server maldet(29147): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 27 2025 04:35:59 server maldet(29147): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 27 2025 04:36:31 server maldet(29147): {scan} file list completed in 32s, found 864 files... Jun 27 2025 04:36:31 server maldet(29147): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 27 2025 04:36:31 server maldet(29147): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (864 files) in progress... Jun 27 2025 04:37:36 server maldet(29147): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 864, malware hits 0, cleaned hits 0, time 98s Jun 27 2025 04:37:37 server maldet(29147): {scan} scan report saved, to view run: maldet --report 250627-0435.29147 Jun 28 2025 04:29:31 server maldet(22176): {update} checking for available updates... Jun 28 2025 04:29:31 server maldet(22176): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 28 2025 04:29:31 server maldet(22176): {update} hashing install files and checking against server... Jun 28 2025 04:29:32 server maldet(22176): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 28 2025 04:29:32 server maldet(22176): {update} latest version already installed. Jun 28 2025 04:29:32 server maldet(22288): {sigup} performing signature update check... Jun 28 2025 04:29:32 server maldet(22288): {sigup} local signature set is version 202506253712170 Jun 28 2025 04:29:32 server maldet(22288): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 28 2025 04:29:32 server maldet(22288): {sigup} latest signature set already installed Jun 28 2025 04:29:32 server maldet(22376): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 28 2025 04:29:33 server maldet(22376): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 28 2025 04:29:33 server maldet(22376): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 28 2025 04:29:33 server maldet(22376): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 28 2025 04:29:33 server maldet(22376): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 28 2025 04:29:40 server maldet(22376): {scan} file list completed in 7s, found 2813 files... Jun 28 2025 04:29:40 server maldet(22376): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 28 2025 04:29:40 server maldet(22376): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2813 files) in progress... Jun 28 2025 04:31:22 server maldet(22376): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2813, malware hits 0, cleaned hits 0, time 110s Jun 28 2025 04:31:22 server maldet(22376): {scan} scan report saved, to view run: maldet --report 250628-0429.22376 Jun 29 2025 04:46:54 server maldet(15830): {update} checking for available updates... Jun 29 2025 04:46:54 server maldet(15830): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 29 2025 04:46:54 server maldet(15830): {update} hashing install files and checking against server... Jun 29 2025 04:46:55 server maldet(15830): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 29 2025 04:46:55 server maldet(15830): {update} latest version already installed. Jun 29 2025 04:46:55 server maldet(15940): {sigup} performing signature update check... Jun 29 2025 04:46:55 server maldet(15940): {sigup} local signature set is version 202506253712170 Jun 29 2025 04:46:55 server maldet(15940): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 29 2025 04:46:55 server maldet(15940): {sigup} latest signature set already installed Jun 29 2025 04:46:55 server maldet(16028): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 29 2025 04:46:55 server maldet(16028): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 29 2025 04:46:55 server maldet(16028): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 29 2025 04:46:55 server maldet(16028): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 29 2025 04:46:55 server maldet(16028): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 29 2025 04:47:02 server maldet(16028): {scan} file list completed in 7s, found 450 files... Jun 29 2025 04:47:02 server maldet(16028): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 29 2025 04:47:02 server maldet(16028): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (450 files) in progress... Jun 29 2025 04:47:30 server maldet(16028): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 450, malware hits 0, cleaned hits 0, time 35s Jun 29 2025 04:47:30 server maldet(16028): {scan} scan report saved, to view run: maldet --report 250629-0446.16028 Jun 30 2025 03:55:13 server maldet(784): {update} checking for available updates... Jun 30 2025 03:55:13 server maldet(784): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jun 30 2025 03:55:14 server maldet(784): {update} hashing install files and checking against server... Jun 30 2025 03:55:14 server maldet(784): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jun 30 2025 03:55:14 server maldet(784): {update} latest version already installed. Jun 30 2025 03:55:14 server maldet(898): {sigup} performing signature update check... Jun 30 2025 03:55:14 server maldet(898): {sigup} local signature set is version 202506253712170 Jun 30 2025 03:55:14 server maldet(898): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jun 30 2025 03:55:14 server maldet(898): {sigup} latest signature set already installed Jun 30 2025 03:55:15 server maldet(986): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jun 30 2025 03:55:15 server maldet(986): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jun 30 2025 03:55:15 server maldet(986): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jun 30 2025 03:55:15 server maldet(986): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jun 30 2025 03:55:15 server maldet(986): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jun 30 2025 03:55:31 server maldet(986): {scan} file list completed in 16s, found 486 files... Jun 30 2025 03:55:31 server maldet(986): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jun 30 2025 03:55:31 server maldet(986): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (486 files) in progress... Jun 30 2025 03:56:08 server maldet(986): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 486, malware hits 0, cleaned hits 0, time 53s Jun 30 2025 03:56:08 server maldet(986): {scan} scan report saved, to view run: maldet --report 250630-0355.986 Jul 01 2025 03:36:24 server maldet(19070): {update} checking for available updates... Jul 01 2025 03:36:25 server maldet(19070): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 01 2025 03:36:25 server maldet(19070): {update} hashing install files and checking against server... Jul 01 2025 03:36:25 server maldet(19070): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 01 2025 03:36:25 server maldet(19070): {update} latest version already installed. Jul 01 2025 03:36:25 server maldet(19183): {sigup} performing signature update check... Jul 01 2025 03:36:25 server maldet(19183): {sigup} local signature set is version 202506253712170 Jul 01 2025 03:36:26 server maldet(19183): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 01 2025 03:36:26 server maldet(19183): {sigup} new signature set 20250701819448 available Jul 01 2025 03:36:26 server maldet(19183): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 01 2025 03:36:26 server maldet(19183): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 01 2025 03:36:27 server maldet(19183): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 01 2025 03:36:27 server maldet(19183): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 01 2025 03:36:28 server maldet(19183): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 01 2025 03:36:29 server maldet(19183): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 01 2025 03:36:29 server maldet(19183): {sigup} verified md5sum of maldet-sigpack.tgz Jul 01 2025 03:36:29 server maldet(19183): {sigup} unpacked and installed maldet-sigpack.tgz Jul 01 2025 03:36:29 server maldet(19183): {sigup} verified md5sum of maldet-clean.tgz Jul 01 2025 03:36:29 server maldet(19183): {sigup} unpacked and installed maldet-clean.tgz Jul 01 2025 03:36:29 server maldet(19183): {sigup} signature set update completed Jul 01 2025 03:36:29 server maldet(19183): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 01 2025 03:36:30 server maldet(19405): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 01 2025 03:36:30 server maldet(19405): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 01 2025 03:36:30 server maldet(19405): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 01 2025 03:36:30 server maldet(19405): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 01 2025 03:36:30 server maldet(19405): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 01 2025 03:36:56 server maldet(19405): {scan} file list completed in 26s, found 468 files... Jul 01 2025 03:36:56 server maldet(19405): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 01 2025 03:36:56 server maldet(19405): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (468 files) in progress... Jul 01 2025 03:37:47 server maldet(19405): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 468, malware hits 0, cleaned hits 0, time 76s Jul 01 2025 03:37:47 server maldet(19405): {scan} scan report saved, to view run: maldet --report 250701-0336.19405 Jul 02 2025 03:40:46 server maldet(7070): {update} checking for available updates... Jul 02 2025 03:40:47 server maldet(7070): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 02 2025 03:40:47 server maldet(7070): {update} hashing install files and checking against server... Jul 02 2025 03:40:47 server maldet(7070): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 02 2025 03:40:47 server maldet(7070): {update} latest version already installed. Jul 02 2025 03:40:47 server maldet(7182): {sigup} performing signature update check... Jul 02 2025 03:40:47 server maldet(7182): {sigup} local signature set is version 20250701819448 Jul 02 2025 03:40:48 server maldet(7182): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 02 2025 03:40:48 server maldet(7182): {sigup} latest signature set already installed Jul 02 2025 03:40:48 server maldet(7270): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 02 2025 03:40:48 server maldet(7270): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 02 2025 03:40:48 server maldet(7270): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 02 2025 03:40:48 server maldet(7270): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 02 2025 03:40:48 server maldet(7270): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 02 2025 03:40:56 server maldet(7270): {scan} file list completed in 8s, found 4109 files... Jul 02 2025 03:40:56 server maldet(7270): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 02 2025 03:40:56 server maldet(7270): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (4109 files) in progress... Jul 02 2025 03:43:03 server maldet(7270): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 4109, malware hits 0, cleaned hits 0, time 135s Jul 02 2025 03:43:03 server maldet(7270): {scan} scan report saved, to view run: maldet --report 250702-0340.7270 Jul 03 2025 03:29:25 server maldet(13827): {update} checking for available updates... Jul 03 2025 03:29:26 server maldet(13827): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 03 2025 03:29:26 server maldet(13827): {update} hashing install files and checking against server... Jul 03 2025 03:29:26 server maldet(13827): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 03 2025 03:29:26 server maldet(13827): {update} latest version already installed. Jul 03 2025 03:29:26 server maldet(13955): {sigup} performing signature update check... Jul 03 2025 03:29:26 server maldet(13955): {sigup} local signature set is version 20250701819448 Jul 03 2025 03:29:27 server maldet(13955): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 03 2025 03:29:27 server maldet(13955): {sigup} latest signature set already installed Jul 03 2025 03:29:27 server maldet(14043): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 03 2025 03:29:27 server maldet(14043): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 03 2025 03:29:27 server maldet(14043): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 03 2025 03:29:27 server maldet(14043): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 03 2025 03:29:27 server maldet(14043): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 03 2025 03:29:32 server maldet(14043): {scan} file list completed in 5s, found 627 files... Jul 03 2025 03:29:32 server maldet(14043): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 03 2025 03:29:32 server maldet(14043): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (627 files) in progress... Jul 03 2025 03:30:12 server maldet(14043): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 627, malware hits 0, cleaned hits 0, time 45s Jul 03 2025 03:30:12 server maldet(14043): {scan} scan report saved, to view run: maldet --report 250703-0329.14043 Jul 04 2025 03:52:19 server maldet(18293): {update} checking for available updates... Jul 04 2025 03:52:19 server maldet(18293): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 04 2025 03:52:20 server maldet(18293): {update} hashing install files and checking against server... Jul 04 2025 03:52:20 server maldet(18293): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 04 2025 03:52:20 server maldet(18293): {update} latest version already installed. Jul 04 2025 03:52:20 server maldet(18403): {sigup} performing signature update check... Jul 04 2025 03:52:20 server maldet(18403): {sigup} local signature set is version 20250701819448 Jul 04 2025 03:52:20 server maldet(18403): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 04 2025 03:52:20 server maldet(18403): {sigup} new signature set 202507041798016 available Jul 04 2025 03:52:20 server maldet(18403): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 04 2025 03:52:21 server maldet(18403): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 04 2025 03:52:21 server maldet(18403): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 04 2025 03:52:21 server maldet(18403): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 04 2025 03:52:22 server maldet(18403): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 04 2025 03:52:22 server maldet(18403): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 04 2025 03:52:22 server maldet(18403): {sigup} verified md5sum of maldet-sigpack.tgz Jul 04 2025 03:52:22 server maldet(18403): {sigup} unpacked and installed maldet-sigpack.tgz Jul 04 2025 03:52:22 server maldet(18403): {sigup} verified md5sum of maldet-clean.tgz Jul 04 2025 03:52:22 server maldet(18403): {sigup} unpacked and installed maldet-clean.tgz Jul 04 2025 03:52:22 server maldet(18403): {sigup} signature set update completed Jul 04 2025 03:52:22 server maldet(18403): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 04 2025 03:52:22 server maldet(18606): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 04 2025 03:52:23 server maldet(18606): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 04 2025 03:52:23 server maldet(18606): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 04 2025 03:52:23 server maldet(18606): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 04 2025 03:52:23 server maldet(18606): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 04 2025 03:52:31 server maldet(18606): {scan} file list completed in 8s, found 464 files... Jul 04 2025 03:52:31 server maldet(18606): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 04 2025 03:52:31 server maldet(18606): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (464 files) in progress... Jul 04 2025 03:53:04 server maldet(18606): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 464, malware hits 0, cleaned hits 0, time 42s Jul 04 2025 03:53:04 server maldet(18606): {scan} scan report saved, to view run: maldet --report 250704-0352.18606 Jul 05 2025 04:02:21 server maldet(10623): {update} checking for available updates... Jul 05 2025 04:02:21 server maldet(10623): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 05 2025 04:02:21 server maldet(10623): {update} hashing install files and checking against server... Jul 05 2025 04:02:22 server maldet(10623): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 05 2025 04:02:22 server maldet(10623): {update} latest version already installed. Jul 05 2025 04:02:22 server maldet(10735): {sigup} performing signature update check... Jul 05 2025 04:02:22 server maldet(10735): {sigup} local signature set is version 202507041798016 Jul 05 2025 04:02:22 server maldet(10735): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 05 2025 04:02:22 server maldet(10735): {sigup} latest signature set already installed Jul 05 2025 04:02:22 server maldet(10827): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 05 2025 04:02:23 server maldet(10827): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 05 2025 04:02:23 server maldet(10827): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 05 2025 04:02:23 server maldet(10827): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 05 2025 04:02:23 server maldet(10827): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 05 2025 04:02:32 server maldet(10827): {scan} file list completed in 9s, found 1187 files... Jul 05 2025 04:02:32 server maldet(10827): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 05 2025 04:02:32 server maldet(10827): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1187 files) in progress... Jul 05 2025 04:03:20 server maldet(10827): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1187, malware hits 0, cleaned hits 0, time 58s Jul 05 2025 04:03:20 server maldet(10827): {scan} scan report saved, to view run: maldet --report 250705-0402.10827 Jul 06 2025 03:47:08 server maldet(21363): {update} checking for available updates... Jul 06 2025 03:47:08 server maldet(21363): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 06 2025 03:47:08 server maldet(21363): {update} hashing install files and checking against server... Jul 06 2025 03:47:09 server maldet(21363): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 06 2025 03:47:09 server maldet(21363): {update} latest version already installed. Jul 06 2025 03:47:09 server maldet(21474): {sigup} performing signature update check... Jul 06 2025 03:47:09 server maldet(21474): {sigup} local signature set is version 202507041798016 Jul 06 2025 03:47:09 server maldet(21474): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 06 2025 03:47:09 server maldet(21474): {sigup} latest signature set already installed Jul 06 2025 03:47:10 server maldet(21562): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 06 2025 03:47:10 server maldet(21562): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 06 2025 03:47:10 server maldet(21562): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 06 2025 03:47:10 server maldet(21562): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 06 2025 03:47:10 server maldet(21562): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 06 2025 03:47:19 server maldet(21562): {scan} file list completed in 9s, found 508 files... Jul 06 2025 03:47:19 server maldet(21562): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 06 2025 03:47:19 server maldet(21562): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (508 files) in progress... Jul 06 2025 03:48:02 server maldet(21562): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 508, malware hits 0, cleaned hits 0, time 52s Jul 06 2025 03:48:02 server maldet(21562): {scan} scan report saved, to view run: maldet --report 250706-0347.21562 Jul 07 2025 04:05:52 server maldet(23830): {update} checking for available updates... Jul 07 2025 04:05:55 server maldet(23830): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 07 2025 04:05:56 server maldet(23830): {update} hashing install files and checking against server... Jul 07 2025 04:05:58 server maldet(23830): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 07 2025 04:05:58 server maldet(23830): {update} latest version already installed. Jul 07 2025 04:06:00 server maldet(23954): {sigup} performing signature update check... Jul 07 2025 04:06:00 server maldet(23954): {sigup} local signature set is version 202507041798016 Jul 07 2025 04:06:02 server maldet(23954): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 07 2025 04:06:03 server maldet(23954): {sigup} new signature set 202507072770854 available Jul 07 2025 04:06:03 server maldet(23954): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 07 2025 04:06:05 server maldet(23954): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 07 2025 04:06:08 server maldet(23954): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 07 2025 04:06:08 server maldet(23954): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 07 2025 04:06:11 server maldet(23954): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 07 2025 04:06:13 server maldet(23954): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 07 2025 04:06:14 server maldet(23954): {sigup} verified md5sum of maldet-sigpack.tgz Jul 07 2025 04:06:16 server maldet(23954): {sigup} unpacked and installed maldet-sigpack.tgz Jul 07 2025 04:06:17 server maldet(23954): {sigup} verified md5sum of maldet-clean.tgz Jul 07 2025 04:06:17 server maldet(23954): {sigup} unpacked and installed maldet-clean.tgz Jul 07 2025 04:06:17 server maldet(23954): {sigup} signature set update completed Jul 07 2025 04:06:18 server maldet(23954): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 07 2025 04:06:20 server maldet(24206): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 07 2025 04:06:25 server maldet(24206): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 07 2025 04:06:25 server maldet(24206): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 07 2025 04:06:26 server maldet(24206): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 07 2025 04:06:26 server maldet(24206): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 07 2025 04:08:45 server maldet(24206): {scan} file list completed in 139s, found 3947 files... Jul 07 2025 04:08:45 server maldet(24206): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 07 2025 04:08:45 server maldet(24206): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (3947 files) in progress... Jul 07 2025 04:12:26 server maldet(24206): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 3947, malware hits 0, cleaned hits 0, time 366s Jul 07 2025 04:12:26 server maldet(24206): {scan} scan report saved, to view run: maldet --report 250707-0406.24206 Jul 08 2025 04:22:59 server maldet(29152): {update} checking for available updates... Jul 08 2025 04:22:59 server maldet(29152): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 08 2025 04:22:59 server maldet(29152): {update} hashing install files and checking against server... Jul 08 2025 04:23:00 server maldet(29152): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 08 2025 04:23:00 server maldet(29152): {update} latest version already installed. Jul 08 2025 04:23:00 server maldet(29261): {sigup} performing signature update check... Jul 08 2025 04:23:00 server maldet(29261): {sigup} local signature set is version 202507072770854 Jul 08 2025 04:23:00 server maldet(29261): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 08 2025 04:23:00 server maldet(29261): {sigup} latest signature set already installed Jul 08 2025 04:23:00 server maldet(29349): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 08 2025 04:23:01 server maldet(29349): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 08 2025 04:23:01 server maldet(29349): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 08 2025 04:23:01 server maldet(29349): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 08 2025 04:23:01 server maldet(29349): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 08 2025 04:23:07 server maldet(29349): {scan} file list completed in 6s, found 2555 files... Jul 08 2025 04:23:07 server maldet(29349): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 08 2025 04:23:07 server maldet(29349): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (2555 files) in progress... Jul 08 2025 04:24:34 server maldet(29349): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 2555, malware hits 0, cleaned hits 0, time 94s Jul 08 2025 04:24:34 server maldet(29349): {scan} scan report saved, to view run: maldet --report 250708-0423.29349 Jul 09 2025 04:13:31 server maldet(11897): {update} checking for available updates... Jul 09 2025 04:13:32 server maldet(11897): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 09 2025 04:13:32 server maldet(11897): {update} hashing install files and checking against server... Jul 09 2025 04:13:32 server maldet(11897): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 09 2025 04:13:32 server maldet(11897): {update} latest version already installed. Jul 09 2025 04:13:33 server maldet(12006): {sigup} performing signature update check... Jul 09 2025 04:13:33 server maldet(12006): {sigup} local signature set is version 202507072770854 Jul 09 2025 04:13:33 server maldet(12006): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 09 2025 04:13:33 server maldet(12006): {sigup} latest signature set already installed Jul 09 2025 04:13:33 server maldet(12094): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 09 2025 04:13:33 server maldet(12094): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 09 2025 04:13:33 server maldet(12094): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 09 2025 04:13:33 server maldet(12094): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 09 2025 04:13:33 server maldet(12094): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 09 2025 04:13:40 server maldet(12094): {scan} file list completed in 7s, found 755 files... Jul 09 2025 04:13:40 server maldet(12094): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 09 2025 04:13:40 server maldet(12094): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (755 files) in progress... Jul 09 2025 04:14:24 server maldet(12094): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 755, malware hits 0, cleaned hits 0, time 51s Jul 09 2025 04:14:24 server maldet(12094): {scan} scan report saved, to view run: maldet --report 250709-0413.12094 Jul 10 2025 04:10:11 server maldet(27336): {update} checking for available updates... Jul 10 2025 04:10:12 server maldet(27336): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Jul 10 2025 04:10:12 server maldet(27336): {update} hashing install files and checking against server... Jul 10 2025 04:10:12 server maldet(27336): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Jul 10 2025 04:10:12 server maldet(27336): {update} latest version already installed. Jul 10 2025 04:10:12 server maldet(27445): {sigup} performing signature update check... Jul 10 2025 04:10:12 server maldet(27445): {sigup} local signature set is version 202507072770854 Jul 10 2025 04:10:13 server maldet(27445): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Jul 10 2025 04:10:13 server maldet(27445): {sigup} new signature set 202507103744209 available Jul 10 2025 04:10:13 server maldet(27445): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 10 2025 04:10:13 server maldet(27445): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Jul 10 2025 04:10:14 server maldet(27445): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Jul 10 2025 04:10:14 server maldet(27445): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 10 2025 04:10:14 server maldet(27445): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Jul 10 2025 04:10:14 server maldet(27445): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Jul 10 2025 04:10:14 server maldet(27445): {sigup} verified md5sum of maldet-sigpack.tgz Jul 10 2025 04:10:15 server maldet(27445): {sigup} unpacked and installed maldet-sigpack.tgz Jul 10 2025 04:10:15 server maldet(27445): {sigup} verified md5sum of maldet-clean.tgz Jul 10 2025 04:10:15 server maldet(27445): {sigup} unpacked and installed maldet-clean.tgz Jul 10 2025 04:10:15 server maldet(27445): {sigup} signature set update completed Jul 10 2025 04:10:15 server maldet(27445): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 10 2025 04:10:15 server maldet(27652): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Jul 10 2025 04:10:15 server maldet(27652): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Jul 10 2025 04:10:15 server maldet(27652): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Jul 10 2025 04:10:15 server maldet(27652): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Jul 10 2025 04:10:15 server maldet(27652): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Jul 10 2025 04:10:25 server maldet(27652): {scan} file list completed in 10s, found 14853 files... Jul 10 2025 04:10:25 server maldet(27652): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Jul 10 2025 04:10:25 server maldet(27652): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (14853 files) in progress... Jul 10 2025 04:17:10 server maldet(27652): {hit} malware hit {YARA}multiple_php_webshells found for /home/dilseshaadi/public_html/wp-content/mu-plugins/695733/index.php Jul 10 2025 04:17:11 server maldet(27652): {hit} malware hit {HEX}php.shell.black-id.719 found for /home/dilseshaadi/public_html/wp-content/uploads/2025/01/952443/index.php Jul 10 2025 04:17:11 server maldet(27652): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 14853, malware hits 2, cleaned hits 0, time 416s Jul 10 2025 04:17:11 server maldet(27652): {scan} scan report saved, to view run: maldet --report 250710-0410.27652 Jul 10 2025 04:17:11 server maldet(27652): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 250710-0410.27652 Jul 10 2025 04:17:11 server maldet(27652): {alert} sent scan report to kkumarclassic123@gmail.com