D7net
Home
Console
Upload
information
Create File
Create Folder
About
Tools
:
/
usr
/
local
/
maldetect.bk37155
/
maldetect.bk133471
/
Filename :
event_log
back
Copy
Sep 01 2025 04:02:40 host maldet(133663): {sigup} performing signature update check... Sep 01 2025 04:02:40 host maldet(133663): {sigup} local signature set is version 20250225482944 Sep 01 2025 04:03:09 host maldet(133663): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 01 2025 04:03:09 host maldet(133663): {sigup} new signature set 20250901485511 available Sep 01 2025 04:03:09 host maldet(133663): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 01 2025 04:03:59 host maldet(133663): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 01 2025 04:04:27 host maldet(133663): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 01 2025 04:04:27 host maldet(133663): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 01 2025 04:05:20 host maldet(133663): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 01 2025 04:05:53 host maldet(133663): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 01 2025 04:05:53 host maldet(133663): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Sep 01 2025 04:05:53 host maldet(133663): {sigup} verified md5sum of maldet-clean.tgz Sep 01 2025 04:05:53 host maldet(133663): {sigup} unpacked and installed maldet-clean.tgz Sep 01 2025 04:05:53 host maldet(132477): {update} completed update v1.6.6 3a1792 => v1.6.6 359d25, running signature updates... Sep 01 2025 04:05:53 host maldet(135830): {sigup} performing signature update check... Sep 01 2025 04:05:53 host maldet(135830): {sigup} local signature set is version 20250225482944 Sep 01 2025 04:05:53 host maldet(135830): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 01 2025 04:05:53 host maldet(135830): {sigup} new signature set 20250901485511 available Sep 01 2025 04:05:53 host maldet(135830): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 01 2025 04:06:13 host maldet(135830): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 01 2025 04:06:13 host maldet(135830): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 01 2025 04:06:13 host maldet(135830): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 01 2025 04:06:43 host maldet(135830): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 01 2025 04:07:27 host maldet(135830): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 01 2025 04:07:27 host maldet(135830): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Sep 01 2025 04:07:27 host maldet(135830): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com Sep 01 2025 04:07:27 host maldet(132477): {update} update and config import completed Sep 01 2025 04:07:27 host maldet(136699): {sigup} performing signature update check... Sep 01 2025 04:07:27 host maldet(136699): {sigup} local signature set is version 20250225482944 Sep 01 2025 04:07:54 host maldet(136699): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 01 2025 04:07:54 host maldet(136699): {sigup} new signature set 20250901485511 available Sep 01 2025 04:07:54 host maldet(136699): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 01 2025 04:08:40 host maldet(136699): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 01 2025 04:09:00 host maldet(136699): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 01 2025 04:09:00 host maldet(136699): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 01 2025 04:09:25 host maldet(136699): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 01 2025 04:10:12 host maldet(136699): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 01 2025 04:10:12 host maldet(136699): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Sep 01 2025 04:10:12 host maldet(136699): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com Sep 01 2025 04:10:12 host maldet(138672): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 01 2025 04:10:12 host maldet(138672): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 01 2025 04:10:12 host maldet(138672): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 01 2025 04:10:12 host maldet(138672): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 01 2025 04:10:12 host maldet(138672): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 01 2025 04:10:30 host maldet(138672): {scan} file list completed in 18s, found 84 files... Sep 01 2025 04:10:30 host maldet(138672): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 01 2025 04:10:30 host maldet(138672): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (84 files) in progress... Sep 01 2025 04:10:32 host maldet(138672): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 84, malware hits 0, cleaned hits 0, time 20s Sep 01 2025 04:10:32 host maldet(138672): {scan} scan report saved, to view run: maldet --report 250901-0410.138672 Sep 02 2025 04:16:59 host maldet(98193): {update} checking for available updates... Sep 02 2025 04:17:16 host maldet(98193): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 02 2025 04:17:16 host maldet(98193): {update} hashing install files and checking against server... Sep 02 2025 04:17:30 host maldet(98193): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 02 2025 04:17:30 host maldet(98193): {update} latest version already installed. Sep 02 2025 04:17:30 host maldet(98671): {sigup} performing signature update check... Sep 02 2025 04:17:30 host maldet(98671): {sigup} local signature set is version 20250225482944 Sep 02 2025 04:17:30 host maldet(98671): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 02 2025 04:17:31 host maldet(98671): {sigup} new signature set 20250901485511 available Sep 02 2025 04:17:31 host maldet(98671): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 02 2025 04:17:45 host maldet(98671): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 02 2025 04:17:59 host maldet(98671): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 02 2025 04:17:59 host maldet(98671): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 02 2025 04:18:12 host maldet(98671): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 02 2025 04:18:25 host maldet(98671): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 02 2025 04:18:25 host maldet(98671): {sigup} verified md5sum of maldet-sigpack.tgz Sep 02 2025 04:18:25 host maldet(98671): {sigup} unpacked and installed maldet-sigpack.tgz Sep 02 2025 04:18:25 host maldet(98671): {sigup} verified md5sum of maldet-clean.tgz Sep 02 2025 04:18:25 host maldet(98671): {sigup} unpacked and installed maldet-clean.tgz Sep 02 2025 04:18:25 host maldet(98671): {sigup} signature set update completed Sep 02 2025 04:18:25 host maldet(98671): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 02 2025 04:18:26 host maldet(99366): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 02 2025 04:18:26 host maldet(99366): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 02 2025 04:18:26 host maldet(99366): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 02 2025 04:18:26 host maldet(99366): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 02 2025 04:18:26 host maldet(99366): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 02 2025 04:18:45 host maldet(99366): {scan} file list completed in 19s, found 95 files... Sep 02 2025 04:18:45 host maldet(99366): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 02 2025 04:18:45 host maldet(99366): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (95 files) in progress... Sep 02 2025 04:18:49 host maldet(99366): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 95, malware hits 0, cleaned hits 0, time 23s Sep 02 2025 04:18:49 host maldet(99366): {scan} scan report saved, to view run: maldet --report 250902-0418.99366 Sep 03 2025 03:15:43 host maldet(81175): {update} checking for available updates... Sep 03 2025 03:15:46 host maldet(81175): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 03 2025 03:15:46 host maldet(81175): {update} hashing install files and checking against server... Sep 03 2025 03:15:46 host maldet(81175): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 03 2025 03:15:46 host maldet(81175): {update} latest version already installed. Sep 03 2025 03:15:46 host maldet(81309): {sigup} performing signature update check... Sep 03 2025 03:15:46 host maldet(81309): {sigup} local signature set is version 20250901485511 Sep 03 2025 03:15:47 host maldet(81309): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 03 2025 03:15:48 host maldet(81309): {sigup} latest signature set already installed Sep 03 2025 03:15:48 host maldet(81435): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 03 2025 03:15:48 host maldet(81435): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 03 2025 03:15:48 host maldet(81435): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 03 2025 03:15:48 host maldet(81435): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 03 2025 03:15:48 host maldet(81435): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 03 2025 03:16:09 host maldet(81435): {scan} file list completed in 21s, found 203 files... Sep 03 2025 03:16:09 host maldet(81435): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 03 2025 03:16:09 host maldet(81435): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (203 files) in progress... Sep 03 2025 03:16:15 host maldet(81435): {hit} malware hit {HEX}php.base64.inject.182 found for /home/dennyscashforcar/public_html/wp-admin/.clone_9StbEhUq/.admin-functions.php Sep 03 2025 03:16:15 host maldet(81435): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 203, malware hits 1, cleaned hits 0, time 27s Sep 03 2025 03:16:15 host maldet(81435): {scan} scan report saved, to view run: maldet --report 250903-0315.81435 Sep 03 2025 03:16:15 host maldet(81435): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 250903-0315.81435 Sep 04 2025 03:37:27 host maldet(70869): {update} checking for available updates... Sep 04 2025 03:37:48 host maldet(70869): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 04 2025 03:37:48 host maldet(70869): {update} hashing install files and checking against server... Sep 04 2025 03:38:34 host maldet(70869): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 04 2025 03:38:34 host maldet(70869): {update} version check shows latest but hash check failed, forcing update... Sep 04 2025 03:38:34 host maldet(70869): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Sep 04 2025 03:39:12 host maldet(70869): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Sep 04 2025 03:39:12 host maldet(70869): {update} verified md5sum of maldetect-current.tar.gz Sep 04 2025 03:39:13 host maldet(70869): {update} completed update v1.6.6 3a1792 => verror code: 522 359d25, running signature updates... Sep 04 2025 03:39:13 host maldet(74367): {sigup} performing signature update check... Sep 04 2025 03:39:13 host maldet(74367): {sigup} local signature set is version 20250901485511 Sep 04 2025 03:39:48 host maldet(74367): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 04 2025 03:39:48 host maldet(74367): {sigup} new signature set 202509041456714 available Sep 04 2025 03:39:48 host maldet(74367): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 04 2025 03:40:08 host maldet(74367): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 04 2025 03:40:57 host maldet(74367): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 04 2025 03:40:57 host maldet(74367): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 04 2025 03:41:17 host maldet(74367): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 04 2025 03:41:57 host maldet(74367): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 04 2025 03:41:57 host maldet(74367): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Sep 04 2025 03:41:57 host maldet(74367): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com Sep 04 2025 03:41:57 host maldet(70869): {update} update and config import completed Sep 04 2025 03:41:57 host maldet(77755): {sigup} performing signature update check... Sep 04 2025 03:41:57 host maldet(77755): {sigup} local signature set is version 20250901485511 Sep 04 2025 03:42:32 host maldet(77755): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 04 2025 03:42:32 host maldet(77755): {sigup} new signature set 202509041456714 available Sep 04 2025 03:42:32 host maldet(77755): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 04 2025 03:43:12 host maldet(77755): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 04 2025 03:43:13 host maldet(77755): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 04 2025 03:43:13 host maldet(77755): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 04 2025 03:43:41 host maldet(77755): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 04 2025 03:44:01 host maldet(77755): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 04 2025 03:44:01 host maldet(77755): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Sep 04 2025 03:44:01 host maldet(77755): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com Sep 04 2025 03:44:01 host maldet(80046): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 04 2025 03:44:01 host maldet(80046): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 04 2025 03:44:01 host maldet(80046): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 04 2025 03:44:01 host maldet(80046): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 04 2025 03:44:01 host maldet(80046): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 04 2025 03:44:19 host maldet(80046): {scan} file list completed in 18s, found 838 files... Sep 04 2025 03:44:19 host maldet(80046): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 04 2025 03:44:19 host maldet(80046): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (838 files) in progress... Sep 04 2025 03:44:33 host maldet(80046): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 838, malware hits 0, cleaned hits 0, time 32s Sep 04 2025 03:44:33 host maldet(80046): {scan} scan report saved, to view run: maldet --report 250904-0344.80046 Sep 05 2025 03:55:20 host maldet(30060): {update} checking for available updates... Sep 05 2025 03:55:42 host maldet(30060): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 05 2025 03:55:42 host maldet(30060): {update} hashing install files and checking against server... Sep 05 2025 03:56:01 host maldet(30060): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 05 2025 03:56:01 host maldet(30060): {update} version check shows latest but hash check failed, forcing update... Sep 05 2025 03:56:02 host maldet(30060): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Sep 05 2025 03:56:22 host maldet(30060): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Sep 05 2025 03:56:22 host maldet(30060): {update} unable to verify md5sum of maldetect-current.tar.gz, update failed! Sep 05 2025 03:56:22 host maldet(38403): {sigup} performing signature update check... Sep 05 2025 03:56:22 host maldet(38403): {sigup} local signature set is version 20250901485511 Sep 05 2025 03:56:42 host maldet(38403): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 05 2025 03:56:42 host maldet(38403): {sigup} new signature set error code: 522 available Sep 05 2025 03:56:42 host maldet(38403): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 05 2025 03:57:28 host maldet(38403): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 05 2025 03:58:14 host maldet(38403): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 05 2025 03:58:14 host maldet(38403): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 05 2025 03:58:14 host maldet(38403): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 05 2025 03:58:15 host maldet(38403): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 05 2025 03:58:15 host maldet(38403): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Sep 05 2025 03:58:15 host maldet(38403): {sigup} verified md5sum of maldet-clean.tgz Sep 05 2025 03:58:15 host maldet(38403): {sigup} unpacked and installed maldet-clean.tgz Sep 05 2025 03:58:15 host maldet(53995): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 05 2025 03:58:15 host maldet(53995): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 05 2025 03:58:15 host maldet(53995): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 05 2025 03:58:15 host maldet(53995): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 05 2025 03:58:15 host maldet(53995): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 05 2025 03:58:29 host maldet(53995): {scan} file list completed in 14s, found 7912 files... Sep 05 2025 03:58:29 host maldet(53995): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 05 2025 03:58:29 host maldet(53995): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (7912 files) in progress... Sep 05 2025 03:59:48 host maldet(53995): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 7912, malware hits 0, cleaned hits 0, time 93s Sep 05 2025 03:59:48 host maldet(53995): {scan} scan report saved, to view run: maldet --report 250905-0358.53995 Sep 06 2025 04:05:50 host maldet(91006): {update} checking for available updates... Sep 06 2025 04:06:36 host maldet(91006): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 06 2025 04:06:36 host maldet(91006): {update} hashing install files and checking against server... Sep 06 2025 04:07:08 host maldet(91006): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 06 2025 04:07:08 host maldet(91006): {update} latest version already installed. Sep 06 2025 04:07:08 host maldet(92440): {sigup} performing signature update check... Sep 06 2025 04:07:08 host maldet(92440): {sigup} local signature set is version 20250901485511 Sep 06 2025 04:07:34 host maldet(92440): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 06 2025 04:07:34 host maldet(92440): {sigup} new signature set 202509041456714 available Sep 06 2025 04:07:34 host maldet(92440): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 06 2025 04:07:54 host maldet(92440): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 06 2025 04:08:24 host maldet(92440): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 06 2025 04:08:24 host maldet(92440): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 06 2025 04:08:24 host maldet(92440): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 06 2025 04:09:17 host maldet(92440): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 06 2025 04:09:17 host maldet(92440): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Sep 06 2025 04:09:17 host maldet(92440): {sigup} verified md5sum of maldet-clean.tgz Sep 06 2025 04:09:17 host maldet(92440): {sigup} unpacked and installed maldet-clean.tgz Sep 06 2025 04:09:17 host maldet(94818): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 06 2025 04:09:17 host maldet(94818): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 06 2025 04:09:17 host maldet(94818): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 06 2025 04:09:17 host maldet(94818): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 06 2025 04:09:17 host maldet(94818): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 06 2025 04:09:38 host maldet(94818): {scan} file list completed in 21s, found 1515 files... Sep 06 2025 04:09:38 host maldet(94818): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 06 2025 04:09:38 host maldet(94818): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (1515 files) in progress... Sep 06 2025 04:09:47 host maldet(94818): {hit} malware hit {HEX}php.nested.base64.663 found for /home/cashforcarsalpha/public_html/wp-admin/10th7e.php Sep 06 2025 04:09:47 host maldet(94818): {hit} malware hit {HEX}php.nested.base64.663 found for /home/cashforcarsalpha/public_html/wp-crom.php Sep 06 2025 04:09:47 host maldet(94818): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 1515, malware hits 2, cleaned hits 0, time 30s Sep 06 2025 04:09:47 host maldet(94818): {scan} scan report saved, to view run: maldet --report 250906-0409.94818 Sep 06 2025 04:09:47 host maldet(94818): {scan} quarantine is disabled! set quarantine_hits=1 in conf.maldet or to quarantine results run: maldet -q 250906-0409.94818 Sep 07 2025 04:26:38 host maldet(174108): {update} checking for available updates... Sep 07 2025 04:27:10 host maldet(174108): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 07 2025 04:27:10 host maldet(174108): {update} hashing install files and checking against server... Sep 07 2025 04:27:50 host maldet(174108): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 07 2025 04:27:50 host maldet(174108): {update} version check shows latest but hash check failed, forcing update... Sep 07 2025 04:27:51 host maldet(174108): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Sep 07 2025 04:28:54 host maldet(174108): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Sep 07 2025 04:28:54 host maldet(174108): {update} unable to verify md5sum of maldetect-current.tar.gz, update failed! Sep 07 2025 04:28:54 host maldet(176663): {sigup} performing signature update check... Sep 07 2025 04:28:55 host maldet(176663): {sigup} local signature set is version 20250901485511 Sep 07 2025 04:29:44 host maldet(176663): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 07 2025 04:29:44 host maldet(176663): {sigup} new signature set 202509072429773 available Sep 07 2025 04:29:44 host maldet(176663): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 07 2025 04:29:44 host maldet(176663): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 07 2025 04:30:16 host maldet(176663): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 07 2025 04:30:16 host maldet(176663): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 07 2025 04:30:36 host maldet(176663): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 07 2025 04:30:56 host maldet(176663): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 07 2025 04:30:56 host maldet(176663): {sigup} verified md5sum of maldet-sigpack.tgz Sep 07 2025 04:30:56 host maldet(176663): {sigup} unpacked and installed maldet-sigpack.tgz Sep 07 2025 04:30:56 host maldet(176663): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com Sep 07 2025 04:30:56 host maldet(176663): {sigup} signature set update completed Sep 07 2025 04:30:56 host maldet(176663): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 07 2025 04:30:56 host maldet(179518): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 07 2025 04:30:56 host maldet(179518): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 07 2025 04:30:56 host maldet(179518): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 07 2025 04:30:56 host maldet(179518): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 07 2025 04:30:56 host maldet(179518): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 07 2025 04:31:21 host maldet(179518): {scan} file list completed in 24s, found 175 files... Sep 07 2025 04:31:21 host maldet(179518): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 07 2025 04:31:21 host maldet(179518): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (175 files) in progress... Sep 07 2025 04:31:27 host maldet(179518): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 175, malware hits 0, cleaned hits 0, time 31s Sep 07 2025 04:31:27 host maldet(179518): {scan} scan report saved, to view run: maldet --report 250907-0430.179518 Sep 08 2025 03:36:49 host maldet(65231): {update} checking for available updates... Sep 08 2025 03:37:35 host maldet(65231): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 08 2025 03:37:35 host maldet(65231): {update} hashing install files and checking against server... Sep 08 2025 03:37:55 host maldet(65231): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 08 2025 03:37:55 host maldet(65231): {update} version check shows latest but hash check failed, forcing update... Sep 08 2025 03:37:55 host maldet(65231): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz Sep 08 2025 03:38:40 host maldet(65231): {update} downloaded https://cdn.rfxn.com/downloads/maldetect-current.tar.gz.md5 Sep 08 2025 03:38:40 host maldet(65231): {update} unable to verify md5sum of maldetect-current.tar.gz, update failed! Sep 08 2025 03:38:40 host maldet(70254): {sigup} performing signature update check... Sep 08 2025 03:38:40 host maldet(70254): {sigup} local signature set is version 202509072429773 Sep 08 2025 03:39:24 host maldet(70254): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 08 2025 03:39:24 host maldet(70254): {sigup} new signature set error code: 525 available Sep 08 2025 03:39:24 host maldet(70254): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 08 2025 03:39:44 host maldet(70254): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 08 2025 03:39:44 host maldet(70254): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 08 2025 03:39:44 host maldet(70254): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 08 2025 03:40:24 host maldet(70254): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 08 2025 03:40:44 host maldet(70254): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 08 2025 03:40:44 host maldet(70254): {sigup} unable to verify md5sum of maldet-sigpack.tgz, please try again or contact proj@rfxn.com Sep 08 2025 03:40:44 host maldet(70254): {sigup} unable to verify md5sum of maldet-clean.tgz, please try again or contact proj@rfxn.com Sep 08 2025 03:40:45 host maldet(73174): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 08 2025 03:40:45 host maldet(73174): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 08 2025 03:40:45 host maldet(73174): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 08 2025 03:40:45 host maldet(73174): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 08 2025 03:40:45 host maldet(73174): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 08 2025 03:41:02 host maldet(73174): {scan} file list completed in 17s, found 180 files... Sep 08 2025 03:41:02 host maldet(73174): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 08 2025 03:41:02 host maldet(73174): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (180 files) in progress... Sep 08 2025 03:41:06 host maldet(73174): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 180, malware hits 0, cleaned hits 0, time 21s Sep 08 2025 03:41:06 host maldet(73174): {scan} scan report saved, to view run: maldet --report 250908-0340.73174 Sep 09 2025 04:06:30 host maldet(86083): {update} checking for available updates... Sep 09 2025 04:06:31 host maldet(86083): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 09 2025 04:06:31 host maldet(86083): {update} hashing install files and checking against server... Sep 09 2025 04:06:32 host maldet(86083): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 09 2025 04:06:32 host maldet(86083): {update} latest version already installed. Sep 09 2025 04:06:32 host maldet(86221): {sigup} performing signature update check... Sep 09 2025 04:06:32 host maldet(86221): {sigup} local signature set is version 202509072429773 Sep 09 2025 04:06:32 host maldet(86221): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 09 2025 04:06:32 host maldet(86221): {sigup} latest signature set already installed Sep 09 2025 04:06:32 host maldet(86310): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 09 2025 04:06:33 host maldet(86310): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 09 2025 04:06:33 host maldet(86310): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 09 2025 04:06:33 host maldet(86310): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 09 2025 04:06:33 host maldet(86310): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 09 2025 04:06:57 host maldet(86310): {scan} file list completed in 24s, found 5938 files... Sep 09 2025 04:06:57 host maldet(86310): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 09 2025 04:06:57 host maldet(86310): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (5938 files) in progress... Sep 09 2025 04:07:45 host maldet(86310): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 5938, malware hits 0, cleaned hits 0, time 73s Sep 09 2025 04:07:45 host maldet(86310): {scan} scan report saved, to view run: maldet --report 250909-0406.86310 Sep 10 2025 04:26:13 host maldet(102784): {update} checking for available updates... Sep 10 2025 04:26:13 host maldet(102784): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 10 2025 04:26:13 host maldet(102784): {update} hashing install files and checking against server... Sep 10 2025 04:26:14 host maldet(102784): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 10 2025 04:26:14 host maldet(102784): {update} latest version already installed. Sep 10 2025 04:26:14 host maldet(102904): {sigup} performing signature update check... Sep 10 2025 04:26:14 host maldet(102904): {sigup} local signature set is version 202509072429773 Sep 10 2025 04:26:14 host maldet(102904): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 10 2025 04:26:14 host maldet(102904): {sigup} new signature set 202509103407087 available Sep 10 2025 04:26:14 host maldet(102904): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 10 2025 04:26:15 host maldet(102904): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 10 2025 04:26:15 host maldet(102904): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 10 2025 04:26:15 host maldet(102904): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 10 2025 04:26:15 host maldet(102904): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 10 2025 04:26:16 host maldet(102904): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 10 2025 04:26:16 host maldet(102904): {sigup} verified md5sum of maldet-sigpack.tgz Sep 10 2025 04:26:16 host maldet(102904): {sigup} unpacked and installed maldet-sigpack.tgz Sep 10 2025 04:26:16 host maldet(102904): {sigup} verified md5sum of maldet-clean.tgz Sep 10 2025 04:26:16 host maldet(102904): {sigup} unpacked and installed maldet-clean.tgz Sep 10 2025 04:26:16 host maldet(102904): {sigup} signature set update completed Sep 10 2025 04:26:16 host maldet(102904): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 10 2025 04:26:16 host maldet(103135): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 10 2025 04:26:16 host maldet(103135): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 10 2025 04:26:16 host maldet(103135): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 10 2025 04:26:16 host maldet(103135): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 10 2025 04:26:16 host maldet(103135): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 10 2025 04:26:38 host maldet(103135): {scan} file list completed in 22s, found 5129 files... Sep 10 2025 04:26:38 host maldet(103135): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 10 2025 04:26:38 host maldet(103135): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (5129 files) in progress... Sep 10 2025 04:27:46 host maldet(103135): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 5129, malware hits 0, cleaned hits 0, time 90s Sep 10 2025 04:27:46 host maldet(103135): {scan} scan report saved, to view run: maldet --report 250910-0426.103135 Sep 11 2025 04:24:23 host maldet(4341): {update} checking for available updates... Sep 11 2025 04:24:23 host maldet(4341): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 11 2025 04:24:23 host maldet(4341): {update} hashing install files and checking against server... Sep 11 2025 04:24:24 host maldet(4341): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 11 2025 04:24:24 host maldet(4341): {update} latest version already installed. Sep 11 2025 04:24:24 host maldet(4456): {sigup} performing signature update check... Sep 11 2025 04:24:24 host maldet(4456): {sigup} local signature set is version 202509103407087 Sep 11 2025 04:24:24 host maldet(4456): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 11 2025 04:24:24 host maldet(4456): {sigup} latest signature set already installed Sep 11 2025 04:24:24 host maldet(4544): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 11 2025 04:24:24 host maldet(4544): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 11 2025 04:24:24 host maldet(4544): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 11 2025 04:24:25 host maldet(4544): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 11 2025 04:24:25 host maldet(4544): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 11 2025 04:24:44 host maldet(4544): {scan} file list completed in 19s, found 466 files... Sep 11 2025 04:24:44 host maldet(4544): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 11 2025 04:24:44 host maldet(4544): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (466 files) in progress... Sep 11 2025 04:24:55 host maldet(4544): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 466, malware hits 0, cleaned hits 0, time 31s Sep 11 2025 04:24:55 host maldet(4544): {scan} scan report saved, to view run: maldet --report 250911-0424.4544 Sep 12 2025 03:47:11 host maldet(190308): {update} checking for available updates... Sep 12 2025 03:47:11 host maldet(190308): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 12 2025 03:47:11 host maldet(190308): {update} hashing install files and checking against server... Sep 12 2025 03:47:11 host maldet(190308): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 12 2025 03:47:11 host maldet(190308): {update} latest version already installed. Sep 12 2025 03:47:12 host maldet(190418): {sigup} performing signature update check... Sep 12 2025 03:47:12 host maldet(190418): {sigup} local signature set is version 202509103407087 Sep 12 2025 03:47:12 host maldet(190418): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 12 2025 03:47:12 host maldet(190418): {sigup} latest signature set already installed Sep 12 2025 03:47:12 host maldet(190506): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 12 2025 03:47:12 host maldet(190506): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 12 2025 03:47:12 host maldet(190506): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 12 2025 03:47:12 host maldet(190506): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 12 2025 03:47:12 host maldet(190506): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 12 2025 03:47:32 host maldet(190506): {scan} file list completed in 20s, found 660 files... Sep 12 2025 03:47:32 host maldet(190506): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 12 2025 03:47:32 host maldet(190506): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (660 files) in progress... Sep 12 2025 03:47:43 host maldet(190506): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 660, malware hits 0, cleaned hits 0, time 31s Sep 12 2025 03:47:43 host maldet(190506): {scan} scan report saved, to view run: maldet --report 250912-0347.190506 Sep 13 2025 03:35:38 host maldet(140775): {update} checking for available updates... Sep 13 2025 03:35:38 host maldet(140775): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.ver Sep 13 2025 03:35:38 host maldet(140775): {update} hashing install files and checking against server... Sep 13 2025 03:35:39 host maldet(140775): {update} downloaded https://cdn.rfxn.com/downloads/maldet.current.hash Sep 13 2025 03:35:39 host maldet(140775): {update} latest version already installed. Sep 13 2025 03:35:39 host maldet(140887): {sigup} performing signature update check... Sep 13 2025 03:35:39 host maldet(140887): {sigup} local signature set is version 202509103407087 Sep 13 2025 03:35:39 host maldet(140887): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet.sigs.ver Sep 13 2025 03:35:39 host maldet(140887): {sigup} new signature set 20250913184498 available Sep 13 2025 03:35:39 host maldet(140887): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 13 2025 03:35:39 host maldet(140887): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz Sep 13 2025 03:35:40 host maldet(140887): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-sigpack.tgz.md5 Sep 13 2025 03:35:40 host maldet(140887): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 13 2025 03:35:40 host maldet(140887): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz Sep 13 2025 03:35:40 host maldet(140887): {sigup} downloaded https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz.md5 Sep 13 2025 03:35:40 host maldet(140887): {sigup} verified md5sum of maldet-sigpack.tgz Sep 13 2025 03:35:40 host maldet(140887): {sigup} unpacked and installed maldet-sigpack.tgz Sep 13 2025 03:35:40 host maldet(140887): {sigup} verified md5sum of maldet-clean.tgz Sep 13 2025 03:35:40 host maldet(140887): {sigup} unpacked and installed maldet-clean.tgz Sep 13 2025 03:35:40 host maldet(140887): {sigup} signature set update completed Sep 13 2025 03:35:40 host maldet(140887): {sigup} 17638 signatures (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 13 2025 03:35:40 host maldet(141133): {scan} launching scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ changes in last 1d to background, see /usr/local/maldetect/logs/event_log for progress Sep 13 2025 03:35:40 host maldet(141133): {scan} signatures loaded: 17638 (14801 MD5 | 2054 HEX | 783 YARA | 0 USER) Sep 13 2025 03:35:40 host maldet(141133): {scan} building file list for /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ of new/modified files from last 1 days, this might take awhile... Sep 13 2025 03:35:40 host maldet(141133): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6 Sep 13 2025 03:35:40 host maldet(141133): {scan} executed /bin/nice -n 19 /bin/ionice -c2 -n 6 /bin/find /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep \( -mtime -1 -o -ctime -1 \) -type f -size +24c -size -6947618c -not -perm 000 -not -uid 0 -not -gid 0 Sep 13 2025 03:36:04 host maldet(141133): {scan} file list completed in 24s, found 183 files... Sep 13 2025 03:36:04 host maldet(141133): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using clamav scanner engine... Sep 13 2025 03:36:04 host maldet(141133): {scan} scan of /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ (183 files) in progress... Sep 13 2025 03:36:11 host maldet(141133): {scan} scan completed on /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/: files 183, malware hits 0, cleaned hits 0, time 31s Sep 13 2025 03:36:11 host maldet(141133): {scan} scan report saved, to view run: maldet --report 250913-0335.141133